Symantec Access Management

Hi Team,

Right now we have our SharePoint Search centre configured to be anonymous. We have a requirement to authenticate users using CA Siteminder through SUN EDS instead of AD.

And, the client also wants to allow anonymous users as well to access above search centre using the same url. Can you please help and let me know if it is possible?

End Result:

So, after configuring the CA Siteminder to authenticate using SUN EDS both the authentic and ananymous users should be able to access centre on same url":

http://.../Pages/MISearch.aspx

Thanks,

Manoj.

Hi. I am hoping you may get an answer here but if you didn't in the next day or two you may want to consider raising a Support case for this.

Thanks,

Sagi

Hi Team,

Greetings…!!!!

Yes, please and go ahead. Earlier we have used following support id : 756372

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Hi Team,

Greetings…!!!!

Any updates over my quesry below, few dats no one responded back:

Right now we have our SharePoint Search centre configured to be anonymous. We have a requirement to authenticate users using CA Siteminder through SUN EDS instead of AD.

And, the client wants to allow anonymous users as well to access above search centre using the same url. Can you please help and let me know if it is possible?

Required End Result:

So, after configuring the CA Siteminder to authenticate using SUN EDS both the authentic and ananymous users should be able to access centre on same url":

http://.../Pages/MISearch.aspx

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Hi Team,

Greetings…!!!!

Please up over the below?

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Hi Team,

Greetings…!!!!

Any updates please?

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

What version of sharepoint are you using, and how is SSO integrated to it? Are you using the SSO Agent for Sharepoint if so what version? What are the access patterns for the authenticated and anonymus users?

Hi Team,

Greetings…!!!!

It is SharePoint 2010, we are planning to use CA SiteMinder to authenticate users from SUN EDS(the agency already have CA SiteMinder aimplemented from one of their other SharePoint application in same farm.).

The requirement is to allow both users, authenticated from EDS and anonymous using the same url after configuring CA SIteMinder.

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Manoj

One Solution is to configure Multiple Authentication Providers in SharePoint. Using this approach the user is redirected to a "LOGIN SELECTION PAGE" with drop down options to choose what type of authentication mechanism the user would like to adopt.

NOTE : This is beyond the CA SSO SharePoint Integration and if user selects the CA SSO SharePoint Trusted Identity Token Issuer from the LOGIN SELECTION PAGE; then that triggers a CA SSO Journey.

Multiple Authentication Methods in SharePoint 2010 – while (alive) { writeCode(); } 

Using Claims Authentication to Configure Multiple Authentication Providers in a CloudShare Environment  

Hi Team,

Greetings…!!!!

Situation in a bit different, we want to authenticate via SUN EDS and anonymously.

There should not be any prompth or popup for enonymous user, can you please suggest?

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Manoj

Option-2

I can think of is to have different zones configured with different authentication method. The URI remains same in zones, but FQDN changes. By this method if user accessed http://anon.ca.com/mysites then this would trigger anonymous auth as this zone is configured with anonymous auth only. However if the user accessed a different zone e.g. http://tip.ca.com/mysites then this would trigger a claim based auth as this zone is configured with Claims Based Auth.

<SNIP>

The term "Zone" was described by Microsoft Technet: "Zones represent different logical paths (URLs) of gaining access to the same Web application. Within each Web application, you can create up to five zones using one of the available zone names: Default, Intranet, Internet, Custom, or Extranet. Each name can only be selected once per Web application. Each zone is represented by a different Web site in IIS."

<SNIP>

https://technet.microsoft.com/en-us/library/cc261698.aspx 

Option-3

Which I have never tried is 

Configure anonymous access for a claims-based Web application (SharePoint Server 2010) 

Create claims-based web applications in SharePoint 2013 

For your case I think you would like to try in the following order and see which suites your requirements,

Option-3

Option-2

Option-1

Peace

Hubert

Hi Team,

Greetings…!!!!

As mentioned earlier the URL has to remain same both for Authentic and Ananymous users.

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Option-3 seems to be setup for single URL. Further more this question should be redirected to Microsoft. This is a Microsoft Sharepoint design implementation question for supporting "Claim Based Authentication and anonymous access using Single URL".

Peace

Hubert

Hi Team,

Greetings…!!!!

Why Microsoft, we would be using your identity provider to authenticate from SUN EDS, right?

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

Manoj

May I know who is going to do the Anonymous Access authentication? What is your expectation? Anonymous Authentication by SharePoint OR Anonymous Authentication by CA SSO?

You are correct in stating that in your case Claim Based Authentication is being done using CA SSO. Claim Based Authentication could be done by any one who support a WIF Standard.

If the expectation is to serve Anonymous Authentication also from CA SSO and Claim Based Authentication also from CA SSO, using the same URL; then that is not possible OOB. Because Authentication URL defines the URL to which the user gets redirected to if there is no SMSESSION Cookie. This Authentication URL is protected using a Auth Scheme (e.g. Form Based).

You can customize your login page to have a radio button which says Anon OR form based. Then trigger the subsequent login journey.

Hi Team,

Greetings…!!!!

K, so I will consider it is not possible ootb.

The customization should come from CA SiteMInder as we would be using your identity manager, right?

Planned Leaves:

3rd – 7th Oct 2016

31st Oct – 14th Nov 2016.

Regards,

Manoj Verma | NCS (A member of SingTel Group) | 5 Ang Mo Kio Street 62 | Singapore-569141 | E: vmanoj@ncs.com.sg<mailto:vmanoj@ncs.com.sg> | M: +65 98209894.

If you want to avoid writing custom code on login pages and trying to make this work, here's another suggestion for supporting Anonymous Authentication using CA SSO and Form Based User Authentication for the same SharePoint WebSite using SharePoint zones, then

Zone Default : TIP1 : Point to Authentication URL /affwebservices/redirectjsp/redirect.jsp : protected using Forms Auth.

Zone Intranet : TIP2 : Point to Authentication URL /affwebservices/redirectjsp/anonredirect.jsp : protected using Anon Auth.

I do not see any other way you can make this solution work, either using Customized login pages OR using zones.

Hi Team,

Greetings..!!!!

Can you pls suggest exactly how this can be done and high level estimates for same?

Thanks,

Manoj verma

Sent from my iPhone

Manoj

Please reach out to CA Account Manager for the Client and have this estimated via CA Professional Services OR via CA Global Delivery depending on the Customization effort. This needs a PoC to be conducted and evaluation of the different Solution options with the Client. This cannot be discussed here in a Public Forum.

Peace

Hubert

Hi Team,

Can you pls connect me?

Thanks,

Manoj

Sent from my iPhone

Hello..