Search code examples
iis-7siteminder

Siteminder root resource rule


I have a ASP.NET MVC Web Site running with Siteminder SOO. Al security is working correctly, except the Home Page.

In the SiteMinder configuration i have only one Realm with Resource Filter: "/" and Default Resource Protection: "Protected". So, all uris are protected. And i have rules for each uri, and a set of Domain Policies that works fine with these rules. The problem is the root page; i don't know how to write a Rule that allow access to the home page, for example: "http://misite.com/".

If I create a Rule with resource = "/", then the Effective Resource is: "my-siteminder-agent//". And a policy with this rule never applies.

¿How can i create a Rule to allow access to the home page for authenticated users?


Solution

  • I solved it using a Rule on SiteMinder to allow Access to '/Home' and a redirect with the IIS Rewrite Module.

    <rewrite>
        <rules>
            <rule name="Root Hit Redirect" stopProcessing="true">
                <match url="^$" />
                <action type="Redirect" url="/Home" />
            </rule>
        </rules>
    </rewrite>