Hi Prabhakaran,

The Siteminder Runbook can be found on the PDN article https://collaborate.pega.com/question/problem-integrating-siteminder-prpc-718

Enclosed are the configurations required on the Siteminder and PRPC end;

Configurations on Siteminder side:
- Configure the Siteminder policy server to protect the PRPC web resources, i.e. the PRPC URL http://<server-name>:<port-no>/prweb/PRServletCustomAuth
- Configure Siteminder to pass the following “response properties” as custom HTTP headers in the HTTP request to Process Commander:
    SM_USER – the username as entered by the user
    SM_ROLE – a collection of LDAP group memberships of the user. These are used to map the
    SM_UNIT – department or other information that can be used to dynamically map the user to an org division
- If MS wants to go with form based authentication, modify the standard login.fcc to meet their requirements

If you use the OOB servlet definitions and URLs you don’t need to change and repackage the web.xml, i.e. using /PRServletCustomAuth.

On the PRPC side:

1. Create a RuleSet that will contain all security related rules. Call it MSSecurity:01-01-01
2. Create an application MSSecurity 01.01 based on the PegaRULES application. Add MSSecurity:01-01 as application RuleSet
3. Change the PegaRULES:Unauthenticated access group to contain the MSSecurity 01.01 application
4. Add the MSSecurity:01-01 RuleSet to your current access group as production RuleSet. (Smart prompt will not work. You will need to type in the complete RuleSet name & version.)
5. Create an authentication activity in RuleSet MSSecurity:01-01-01 and call it Code-Security.SMAuthenticate or similar.
  a. Step 1 – Extract the Siteminder response parameters from the HTTP headers:
  Property-Set Param.UserIdentifier @java("((javax.servlet.http.HttpServletRequest)tools.getRequestor().getRequestorPage().getObject(\"pxHTTPServletRequest\")).getHeader(\"SM_USER\")")
  b. Step 2 – Send the extracted username to the log file for debugging
  Log-Message “UserIdentifier: “ + param.UserIdentifier  InfoForced

 
If you’re able to get the Siteminder login prompt when first going to the PRPC URL, and then are able to see the username printed in the log files you’re almost there. The only thing left is for you to create a Data-Admin-Operator-ID page from the username and a model user and copy that page to the pyOperPage java object.

Regards,

Basavaraj