Siteminder HTTP Client Authentication

Replies to This Discussion

Permalink Reply by David Saraiva on August 20, 2009 at 4:42pm

You should be able to develop your HTTP client in Java and then submit the basic credentials (username/password) in the HTTP authorization header. And yes, you'll have to enable non-browser client support in the auth scheme in the Siteminder admin UI.

• ▶ Reply

Permalink Reply by Aaron berman on August 22, 2009 at 8:11am

Also if you are using a non browser client to push basic authentication credentials, you will also have to set the RequireCookies Setting to No in the ACO.

In a browser world, this this set to Yes, when SM sends the 401 telling the browser to prompt for basic credentials it also sends a SMCHALLENGE=Yes cookie. when the basic creds come back it expects this cookie to be present.

in your space, where the basic creds are coming directly from an app, there would likely be no smchallenge cookie so the auth scheme would nrrd to know to process the authorization anyways.

• ▶ Reply

Permalink Reply by Vipin on September 7, 2009 at 11:15am

Thanks, i was able to implement this

• ▶ Reply

Permalink Reply by David Saraiva on September 8, 2009 at 8:44am

That's great to hear. Good luck.

• ▶ Reply

Permalink Reply by rishit on September 16, 2009 at 5:03pm

Hi Vipin,
Could you let me know how you made this work? we have Siteminder on IIS and when users send a request via browser, they are presented with the login.fcc form. However we also access resources with requests sent from vbscript, vba etc. How do i send my credentials via such applications to Siteminder?

• ▶ Reply

Permalink Reply by Vipin on October 12, 2009 at 11:46am

Hi Rishit,

Sorry for the late reply. Here is the code in VBSCRIPT. I have written the code in Java, Let me know if you need that also

Dim XMLHTTP As Object
Set XMLHTTP = CreateObject("MSXML2.serverXMLHttp")
XMLHTTP.Open “GET”, strUrl, False, strUsr, strPwd
XMLHTTP.setRequestHeader "Cookie", "SMCHALLENGE=YES"
XMLHTTP.send

This is from this site

https://apps.skyworthttg.com/forums/viewtopic.php?f=6&t=203

• ▶ Reply

Permalink Reply by kk on December 24, 2009 at 2:33am

Hi Vipin,

Could you please give the code in Java for the 'Non Browser SiteMinder Authentication with a HTML Login Page' ?

Thank you

• ▶ Reply

Permalink Reply by Suresh on April 28, 2010 at 8:05am

HI Vipin,
Can you please post the complete java code for 'Non Browser SiteMinder Authentication' using httpclient?

Thanks

• ▶ Reply

Permalink Reply by Vijay Krishna Doddala on December 14, 2011 at 10:28am

Need Urgent Help:

We are developing native mobile application on iOS & Android platforms. For this, we need a authentication through Siteminder. Can we invoke login.fcc URL from mobile application(it is native)? If so, what are the steps & configurations specific to mobile env. is needed on Siteminder? Please guide me on this... Really thankful if anyone can help me on this..

• ▶ Reply

Permalink Reply by mohit mahajan on January 5, 2012 at 9:34am

Hi Vipin,

I need to authenticate from the site-minder and the redirect to the target URL .The site-minder is setup with the domino environment and the target URL is also of the domino agent.

Please give the code in Java for the 'Non Browser SiteMinder Authentication with a HTML Login Page' ?

Thank you

• ▶ Reply