Your Source for Help with Single-Sign-On Solutions

SiteMinder SQL Server

Hi,

In my previous project i developed an app that managed accounts for the siteminder in Sun directory server (LDAP). Whole thing worked fine. Now i have been asked to develop a simmilar app and have suggested that we use Sql server with C# for speedy development.

Can you please tell me how well does siteminder support sql server? Is there a schema definition for users in sql server for siteminder? Are there are resources available that inform about support in siteminder for sql server.

Basically, i want to be able to maintain users in sql database and authenticate them using siteminder.

Thanks

Amar

▶ Reply to This

Replies to This Discussion

Permalink Reply by Todd Clayton on March 10, 2010 at 6:40pm: In SiteMinder you create a query scheme which defines the SQL queries to authenticate users against the DB, get attribute information, etc. You don't need a custom schema for the users. The main thing to keep in mind is how the password is hashed. SiteMinder just does a compare. So if the password is hashed you will need a stored procedure or custom authentication scheme to handle the encryption prior to the compare.

Todd; ▶ Reply to This

Permalink Reply by amar on March 11, 2010 at 2:25am: Great, Thanks Todd,

Read the other post on auth using stored procedure.I think thats the way to go. provide hashing using clr and call it in sql. I dont know much about installation etc of the Siteminder, does one need a directory server to install Siteminder?

My requirements basically are for Siteminder to provide SSO using sql server auth and maybe restrict access to URLs which the user does not have access to.I wonder we achieved that through policyserver or Siteminder lasttime.; ▶ Reply to This

Permalink Reply by Todd Clayton on March 11, 2010 at 6:45am: No, you don't need a directory server. You can store the SiteMinder policies in a database. So, if you're users are in the DB, you might as well use that for you policies, too.

Todd; ▶ Reply to This