SAML implementation in System Manager

Last Updated : Apr 16, 2026 |

System Manager uses SAML implementation version 2.0 of OpenAM Release 9.5.4 to provide SAML based authentication with external/remote Identity Providers. System Manager functions as a Service Provider, consumer of assertions. You can configure CA Siteminder or a similar solution as a Remote Identity Provider, the producer of assertions.

System Manager uses Web Browser Single Sign On profile of SAML authentication. In System Manager, authentication using SAML differs from other external authentication methods such as remote LDAP and RADIUS in the following ways:

  • You require a special URL to invoke SAML based authentication. You can bookmark a URL as https://<<smgr-fqdn>>?performsso=saml.

    The system subjects:

    • Any incoming HTTP request to System Manager with a request parameter performsso set to saml to SAML based authentication.

    • All other URLs to existing authentication handling and redirects an unauthenticated request to the login screen of System Manager.

  • System Manager does not provide its login screen for SAML authentication. The system redirects an unauthenticated user to the login screen of Remote Identity Provider (R-IDP). On successful authentication, the system redirects you to System Manager.