Configuring the CA SiteMinder Federation Security Services (SMFSS) Assertion Generator Plug-in (AGP) for Microsoft SharePoint 2010

Document ID:  TEC546523
Last Modified Date:  06/19/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA Federation

Releases

  • CA Federation:Release:12 SP3
  • CA Federation:Release:12 SP2
  • CA Federation:Release:12.0 SP2
  • CA Federation:Release:12.0 SP3

Components

  • SITEMINDER FEDERATION SECURITY SERVICES:SMFSS
Issue:

SiteMinder Federation Security Services generates multi-valued SAML claims in a format not understood by Microsoft SharePoint 2010.

Environment:
CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP). This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.
Cause:

By design in this release.

Workaround:

This KB provides a way to use multi-valued SAML claims with Microsoft SharePoint 2010 and CA SiteMinder Federation Security Services (SMFSS) 12.0.2.x and 12.0.3.0 using the referenced Assertion Generator Plug-in (AGP). This AGP is not required for SiteMinder FSS 12.0.3.1 or higher and is not supported with Federation Manager Standalone.

For complete instructions about how to configure Federation between SiteMinder and SharePoint 2010 refer to the paper Configuring Identity Federation between CA SiteMinder and Microsoft SharePoint 2010, which can be found on the Microsoft Interop Vendor Alliance website http://interopvendoralliance.org/Labs.aspx.

For the document "SMFSS SharePoint 2010 AGP Sample Configuration", click here.

 

Additional Information:

For the sample AGP, click here.

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >