SiteMinder Custom Response Attribute Returned NULL in IdentityMinder getSMHeader method

Document ID : KB000045788
Last Modified Date : 14/02/2018
Show Technical Document Details

Title:

SiteMinder Custom Headers Returned NULL in IdentityMinder getSMHeader method

 

Issue:

BLTH uses the below code to retrieve some custom headers sent from SiteMinder (SM) responses, for example:

 

String userSessionUniqueIP = blthContext.getSMHeader("USERSESSIONIP");

...       

logInfoMessage("USERSESSIONIP = " + blthContext.getSMHeader("USERSESSIONIP"), false);

...           

blthContext.getUser().setAttribute("usersessionip", userSessionUniqueIP);

 

 The getSMHeader() method fails to retrieve the header value from a SM custom response, and receives "null" for the attribute (except SMUSER header). IdentityManager (IM) application log shows, for example:

INFO  [ims.tasktrack.custom] USERSESSIONIP = null

 

Environment: 

CA IdentityMinder version: 12.6 SP4

IdentityMinder  Server OS: Windows 2008 R2

SiteMinder Integration: Yes

SiteMinder version: 12.52 SP1 CR02

SiteMinder Server OS: Windows 2008 R2

 

Cause:

IM application, by default, can only retrieve some SM headers specified in

<IM app path>\iam_im.ear\config\com\netegrity\config\SiteMinderHeaders.properties

 

Resolution:

To fix the issue, administrators need to modify SiteMinderHeaders.properties file by adding the custom attributes returned by the SM reponses, for example,USERSESSIONIP

 

picture1.png

Note: the header name must exactly match the value set in the Variable Name in the corresponding SM response.

Save the file and restart IM application for the change to take effect.