Authentication Chaining

Authentication Chaining is a type of authentication scheme that allows an Administrator to configure different authentication modules to behave as a single authority that validates the credentials provided to authenticate a user. It provides the capability to support multiple authentications for a single realm.
casso1283
What is Authentication Chaining?
Authentication Chaining
is a type of authentication scheme that allows an Administrator to configure different authentication modules to behave as a single authority that validates the credentials provided to authenticate a user. It provides the capability to support multiple authentications for a single realm.
Authentication Chain has the following capabilities:
  • configuring multiple authentication modules to identify the user
  • support multiple authentications for a realm
  • provides a perception of a single authority
Currently,
SiteMinder
supports only Integrated Windows Authentication (IWA) Fallback to Forms-based authentication scheme.
IWA Fallback to Forms
If IWA/Windows authentication scheme fails,
SiteMinder
falls back to Forms-based authentication scheme. This fallback process helps you combine an IWA authentication scheme and a form/HTML authentication scheme as the new authentication chain.
To configure IWA Fallback to Forms, see Configure IWA Fallback to Forms Using Authentication Chain.
The following illustrations explain how IWA authentication scheme falls back to Forms-based authentication scheme inside the corporate network and outside the corporate network:
Authentication Sequence Inside Corporate Network
AuthenticationSequence_In_CorporateNetwork
AuthenticationSequence_In_CorporateNetwork
  • AuthChain Handler is the manager component that manages and evaluates the user authentication.
Authentication Sequence Outside Corporate Network
AuthenticationSequence_Outof_CorporateNetwork
AuthenticationSequence_Outof_CorporateNetwork