Your Source for Help with Single-Sign-On Solutions

Siteminder HTTP Client Authentication

Hi All,

Can anybody share some ideas on how can i do a Non Browser Authentication with a HTML Login Page Protected Applications. I have tried by Checking the Box "Use non-browser clients" in the Auth Scheme but that doesnt work.

Also i want to implement this code in Java and WSDL (SOAP)

Regards,
Vipin

▶ Reply to This

Replies to This Discussion

Permalink Reply by David Saraiva on August 20, 2009 at 4:42pm: You should be able to develop your HTTP client in Java and then submit the basic credentials (username/password) in the HTTP authorization header. And yes, you'll have to enable non-browser client support in the auth scheme in the Siteminder admin UI.; ▶ Reply to This

Permalink Reply by Aaron berman on August 22, 2009 at 8:11am: Also if you are using a non browser client to push basic authentication credentials, you will also have to set the RequireCookies Setting to No in the ACO.

In a browser world, this this set to Yes, when SM sends the 401 telling the browser to prompt for basic credentials it also sends a SMCHALLENGE=Yes cookie. when the basic creds come back it expects this cookie to be present.

in your space, where the basic creds are coming directly from an app, there would likely be no smchallenge cookie so the auth scheme would nrrd to know to process the authorization anyways.; ▶ Reply to This

Permalink Reply by Vipin on September 7, 2009 at 11:15am: Thanks, i was able to implement this; ▶ Reply to This

Permalink Reply by David Saraiva on September 8, 2009 at 8:44am: That's great to hear. Good luck.; ▶ Reply to This

Permalink Reply by rishit on September 16, 2009 at 5:03pm: Hi Vipin,
Could you let me know how you made this work? we have Siteminder on IIS and when users send a request via browser, they are presented with the login.fcc form. However we also access resources with requests sent from vbscript, vba etc. How do i send my credentials via such applications to Siteminder?; ▶ Reply to This

Permalink Reply by Vipin on October 12, 2009 at 11:46am: Hi Rishit,

Sorry for the late reply. Here is the code in VBSCRIPT. I have written the code in Java, Let me know if you need that also

Dim XMLHTTP As Object
Set XMLHTTP = CreateObject("MSXML2.serverXMLHttp")
XMLHTTP.Open “GET”, strUrl, False, strUsr, strPwd
XMLHTTP.setRequestHeader "Cookie", "SMCHALLENGE=YES"
XMLHTTP.send

This is from this site

https://apps.skyworthttg.com/forums/viewtopic.php?f=6&t=203; ▶ Reply to This

Permalink Reply by kk on December 24, 2009 at 2:33am: Hi Vipin,

Could you please give the code in Java for the 'Non Browser SiteMinder Authentication with a HTML Login Page' ?

Thank you; ▶ Reply to This

Permalink Reply by Suresh on April 28, 2010 at 8:05am: HI Vipin,
Can you please post the complete java code for 'Non Browser SiteMinder Authentication' using httpclient?

Thanks; ▶ Reply to This