Skip to main content
-Dipen-
Level 2
Oct 16, 2015 2:28 AM UTC
Solved

siteminder header value

Hi,

I am not sure if this is the correct place to ask. I am using CA siteminder for authentication. So after successful login I am supposed to get logged in user name from siteminder header. So if the target url is a Jboss application the in HttpServletRequest object request.getHeader("sm_user") returns an encrypted value. whereas if I target url is CQ5 application page then on that page slingRequest.getHeader("sm_user") returns unencrypted value of user name. Can anyone tell me why this happening?

Thanks

-Dipen-

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Sham_HC
Sham_HCAccepted solution
Level 10
Oct 16, 2015 2:28 AM UTC

Might there is custom authentication handler implemented to decrypt OR siteminder might have configured to not encrypt for cq requests. 

2 replies

-Dipen-
-Dipen-Author
Level 2
Oct 16, 2015 2:28 AM UTC

Solved... Had to configure siteminder not to encrypt the header values.

Translate
Sham_HC
Sham_HCAccepted solution
Level 10
Oct 16, 2015 2:28 AM UTC

Might there is custom authentication handler implemented to decrypt OR siteminder might have configured to not encrypt for cq requests. 

Translate