Help in integrating Enterprise Siteminder with AEM6 for SSO | Community
Skip to main content
Level 2
October 16, 2015
Solved

Help in integrating Enterprise Siteminder with AEM6 for SSO

  • October 16, 2015
  • 3 replies
  • 2100 views

Hi Experts,

We are trying to integrate AEM6 with Enterprise Siteminder for SSO implementation. Please note that we are not using LDAP. All internal users reside in siteminder whereas external users would be stored in CRX.
 
My Queries,
1) Is it a straight forward implementation?
2) Do we have to write a custom login module for redirecting from Siteminder to AEM ?
3) What all are the parameters expected from Enterprise Siteminder for the implementation?
     a) IDP Url
     b) IDP public certificate
     c) anything more?
4) Entity ID / Audience - ?
5) SSO Assertion consumer service endpoint / URL ?

 

Regards,

Manjith

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Sham_HC

If you are talking about  SiteMinder integrated with Sun OpenSSO support of saml2 then

  1. Yes you need to configure & details at [1].
  2. Destination at saml should take care of landing. No need of special implementation.
  3. Refer [1]
  4. Refer [1]
  5. Refer [1]

[1]

http://docs.adobe.com/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

https://helpx.adobe.com/experience-manager/kb/saml-demo.html

3 replies

Sham_HC
Sham_HCAccepted solution
Level 10
October 16, 2015

If you are talking about  SiteMinder integrated with Sun OpenSSO support of saml2 then

  1. Yes you need to configure & details at [1].
  2. Destination at saml should take care of landing. No need of special implementation.
  3. Refer [1]
  4. Refer [1]
  5. Refer [1]

[1]

http://docs.adobe.com/docs/en/cq/current/core/administering/saml-2-0-authenticationhandler.html

https://helpx.adobe.com/experience-manager/kb/saml-demo.html

Level 2
March 27, 2017

What would #5,  SSO Assertion consumer service endpoint / URL, above be?

This is not clear from:  https://docs.adobe.com/docs/en/aem/6-0/administer/security/saml-2-0-authenticationhandler.html

Is the SAML Authentication Handler "Default Redirect" property the SSO Assertion consumer service endpoint?

MC_Stuff
Level 10
March 28, 2017

Hi,

It should end with /saml_login

Thanks,