Skip to main content
Level 2
Oct 16, 2015 2:29 AM UTC
Solved

Help in integrating Enterprise Siteminder with AEM6 for SSO

Hi Experts,

We are trying to integrate AEM6 with Enterprise Siteminder for SSO implementation. Please note that we are not using LDAP. All internal users reside in siteminder whereas external users would be stored in CRX.
 
My Queries,
1) Is it a straight forward implementation?
2) Do we have to write a custom login module for redirecting from Siteminder to AEM ?
3) What all are the parameters expected from Enterprise Siteminder for the implementation?
     a) IDP Url
     b) IDP public certificate
     c) anything more?
4) Entity ID / Audience - ?
5) SSO Assertion consumer service endpoint / URL ?

 

Regards,

Manjith

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Sham_HC
Sham_HCAccepted solution
Level 10
Oct 16, 2015 2:29 AM UTC

If you are talking about  SiteMinder integrated with Sun OpenSSO support of saml2 then

  1. Yes you need to configure & details at [1].
  2. Destination at saml should take care of landing. No need of special implementation.
  3. Refer [1]
  4. Refer [1]
  5. Refer [1]

[1]

http://docs.adobe.com/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

https://helpx.adobe.com/experience-manager/kb/saml-demo.html

3 replies

Sham_HC
Sham_HCAccepted solution
Level 10
Oct 16, 2015 2:29 AM UTC

If you are talking about  SiteMinder integrated with Sun OpenSSO support of saml2 then

  1. Yes you need to configure & details at [1].
  2. Destination at saml should take care of landing. No need of special implementation.
  3. Refer [1]
  4. Refer [1]
  5. Refer [1]

[1]

http://docs.adobe.com/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

https://helpx.adobe.com/experience-manager/kb/saml-demo.html

Translate
Level 2
Mar 27, 2017 6:56 PM UTC

What would #5,  SSO Assertion consumer service endpoint / URL, above be?

This is not clear from:  https://docs.adobe.com/docs/en/aem/6-0/administer/security/saml-2-0-authenticationhandler.html

Is the SAML Authentication Handler "Default Redirect" property the SSO Assertion consumer service endpoint?

Translate
MC_Stuff
Level 10
Mar 28, 2017 1:58 AM UTC

Hi,

It should end with /saml_login

Thanks,

Translate