Help in integrating Enterprise Siteminder with AEM6 for SSO

[CheriCQ]

Hi Experts,

We are trying to integrate AEM6 with Enterprise Siteminder for SSO implementation. Please note that we are not using LDAP. All internal users reside in siteminder whereas external users would be stored in CRX.

My Queries,

1) Is it a straight forward implementation?

2) Do we have to write a custom login module for redirecting from Siteminder to AEM ?

3) What all are the parameters expected from Enterprise Siteminder for the implementation?

     a) IDP Url

     b) IDP public certificate

     c) anything more?

4) Entity ID / Audience - ?

5) SSO Assertion consumer service endpoint / URL ?

Regards,

Manjith

[Sham_HC · Accepted solution]

If you are talking about  SiteMinder integrated with Sun OpenSSO support of saml2 then

1. Yes you need to configure & details at [1].
2. Destination at saml should take care of landing. No need of special implementation.
3. Refer [1]
4. Refer [1]
5. Refer [1]

[1]

http://docs.adobe.com/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

https://helpx.adobe.com/experience-manager/kb/saml-demo.html

[efahmy]

What would #5,  SSO Assertion consumer service endpoint / URL, above be?

This is not clear from:  https://docs.adobe.com/docs/en/aem/6-0/administer/security/saml-2-0-authenticationhandler.html

Is the SAML Authentication Handler "Default Redirect" property the SSO Assertion consumer service endpoint?

[MC_Stuff]

Hi,

It should end with /saml_login

Thanks,