CA Single Sign-On (formerly CA SiteMinder)
CA Single Sign-On, originally known as CA SiteMinder, was an enterprise web access management (WAM) platform that provided centralized authentication, single sign-on (SSO), and policy-based authorization for web applications. It supported industry-standard federation protocols (SAML 2.0, WS-Federation) and integrated with corporate directories for user authentication.
Key Capabilities
-
Centralized web access control: Enabled organizations to manage authentication and authorization policies across multiple web and legacy applications from a single platform.
-
Federated SSO support: Implemented SAML 2.0 and WS-Federation to enable identity federation between internal and external systems.
-
Directory and credential flexibility: Integrated with LDAP, Active Directory, and custom credential stores for enterprise-scale deployments.
-
Granular policy enforcement: Supported policy-based access control decisions tied to user attributes, resources, and context.
Limitations
-
Legacy architecture: Designed primarily for on-premises, agent-based WAM models; not natively cloud-native or API-first.
-
Complex administration: Requires multiple components (Policy Server, Web Agent, Administrative UI) and significant operational overhead.
-
Modern protocol gaps: Lacks native OpenID Connect and OAuth 2.0 support without additional gateways or extensions.
-
Product lifecycle changes: Following Broadcom’s acquisition of CA Technologies (2018), CA SSO transitioned into Symantec Access Management under Broadcom.
-
Limited CIAM suitability: Built for workforce web SSO; lacks native consumer identity (self-service registration, consent, progressive profiling) capabilities.