Symantec Access Management

Hello Team,

I am trying to introduce CA SSO for authentication for all applications. The existing authentication happens through External SOAP calls only. Is it possible that through CA SSO we can integrate external SOAP calls to authenticate the user through CA SSO policies? We don't have direct access to user directory.

anyone implement same or idea for the same scenario?

Yes, Siteminder does support SOAP/REST API's for Authentication/Authorizations. Please refer below docops link for more detaiks:

Configuring the Authentication and Authorization Web Services - CA Single Sign-On - 12.8 - CA Technologies Documentation 

https://support.ca.com/cadocs/0/CA%20SiteMinder%2012%2051-ENU/Bookshelf_Files/PDF/web_services_scenarios_enu.pdf 

How to expose REST services to support Siteminder authentication & authorization  ? 

Hope these helps !!!

Regards

Ashok

The way Access Gateway services works is clients can make authentication and authorization calls to the CA SSO through this Soap/Rest services. My requirement here is different.

Sorry if I didn't explain my scenario clearly.

We don't have a SSO setup currently. All authentication and authorization is done by another middleware which has exposed interface as SOAP services. We can send the username and password to this SOAP service and middleware authenticates the user. We are trying to put CA SSO in front of this setup. 

1) CA SSO will look if the URL is protected and will redirected to a login page.

2) User will enter username and password which will be sent to CA SSO.

3) I want to call this SOAP service exposed by existing middleware to authenticate.

4) Notify CA SSO once the authentication is done

Is it possible for me to call this SOAP service from CA SSO policy server so that I can authenticate and  return the authentication status back to CA SSO.

Sunder, Yes, you can do that, say the SOAP service is on JBoss server.  I don't believe you need the SPS/ agent unless you want to authenticate via policy server.

- Rgds., Vijay

Please can you give me details how it can be done. Can we use CA Custom Authentication Scheme or some other method? If yes, Please can you provide me the details. 

Please can you help me with details for this implementation using CA Single Sign On.

That's correct, this method using Access Gateway is what is recommended. Rgds - Vijay