I am getting error while installing CA Access Gateway.
I have already configured
Please suggest me how I can resolve this.
For your reference I am adding the screen shots.
CA Single Sign-On
If the SiteMiner Administrator defined during the install/config does not have sufficient rights to create Policy Store objects, this step will fail requiring a manual configuration of the Policy Store objects. Also, if the Policy Server defined during the install/config is at an earlier version than the R12.52x Access Gateway, then automatic creation of the Policy Store objects will also fail requiring a manual configuration of the Policy Store objects.
Refer : Manually create the required Policy Store objects to protect the R12.52x Access Gateway ProxyUI with CA Single Sign On.
Can you verify if the ACO and other information provided is correct while doing the configuration ?
yes thats correct.
There are two issues here and they may be independent of each other.
The first screenshot is failure to create the Policy Domain that protects the ProxyUI. The second screenshot is a server error, not sure if that is related to the first failure (I think it is not).
For Issue-1 : failure to create the Policy Domain that protects the ProxyUI.
Leo already provided the manual steps. The reasons as to why it would fail is more than a handful. Hence I feel the better option is to just create the Policy Domain manually, rather than trying to break our heads about why the Configuration Wizard failed (it is just not worth the man-hours / effort to debug). Alternatively I also have an ER / Ideation (feel free to cast your vote, if you think it benefits) raised to include this Policy Domain for CA Access Gateway into smpolicy.xml rather than incorporating this into CA Access Gateway Configuration Wizard which is quite error prone (for most of the time it fails).
For Issue-2 : Server Error.
Did you see any errors in server.log ? Were you able to access the default virtual host successfully after CA Access Gateway started ?
I am not able to log in into CA Access Gateway.
I have given the above credentials.
Please tell me how can i create a new credential for the same for login.
Please find the screen shot
User you are trying to login to Siteminder Admin UI & SPS (Access Gateway ) Proxy UI is different .
You should use the user - part of the User Directory that added to the DOMAIN-SPSADMINUI-<AgentName>
Dear Leo Joseph,
I am adding below screen shot for your reference ...
I think I have integrated AD with SSO successfully.
Thank you and regards,
How I will login to CA Access Gateway.
As others mentioned, the nxgetAD you have defined in the DOMAIN-SPSADMINUI-... domain is the one that will be checked to authenticate the user & password you are introducing in the proxyui login page.
For this, there should be also a Policy where you specify which user/s will be allowed to access (even if the credentials are correct, so for example if you only wish an administrator account to login here).
So, you should already have a policy object (may be called POLICY-SPSADMINUI-... (etc)) where you need to define this. You may add a single entry or depending on the root/base DN you defined for the nxgetAD User Directory adding all may work for you. This depends on your needs, but the idea is to specify which user/s will be able to access the proxyui.
You should find this under the "Domain Policies" section (so in AdminUI, Policies > Domain menu)
This entry is added in the Users tab of the policy.
I hope this helps.
login to CA Access Gateway with the user which is presented Active Directory (nxgetAD).
But it is showing wrong user id and password.
May I know what should be the password?
Thanking you and regards,
This is the user password associated with the account present in nxgetAD.
Retrieving data ...