How to pass Siteminder HTML Forms user/password information

>  I don't want to point SiteMinder to AD,
you need to install a SiteMinder Agent at AD (sorry don't know how to do that)

This question is not that similar to the one I posted several years ago.  However I have seen people use an ASP page that gathers user info from LDAP server or siteminder.  Once this information is gathered, using VBScript in the ASP page you can post to an FCC page with the gathered credentials.  I remember the layout but I don’t remember the code used to gather the credentials from LDAP.  When a user wanted to go to a page that was secure the user would click on a link and a second page would come up with a message stating that you are leaving the current site for a more secure site and to press OK to proceed.  This was the ASP page were all the code was located and when the user would hit OK it would post to an FCC page, if the credential were correct it would forward them to the right page, if they were not then they would get sent to an error page.  Hopefully this will help but I don’t remember the code that was used to get the info as I did not write it.  

Oscar

Global.asa snippet:

-----
      'FIND LOGIN NAME IN USER DB
      txtLogin = Request.ServerVariables("LOGON_USER")
      if instr(txtLogin, "\") <> 0 then
            loginArray = Split(txtLogin, "\")
            login = loginArray(1)
      end if
      
      'SEARCH USER DATABASE FOR LOGIN      
      dim adoCon
      dim rsUsers
      set adoCon = Server.CreateObject("ADODB.Connection")
      adoCon.Open dbUsersConnectionstring
      set rsUsers = Server.CreateObject("ADODB.Recordset")
      strSQL = "SELECT * FROM tblCompany WHERE Login = " & "'" & login & "'"
      rsUsers.Open strSQL, adoCon
      
      'CREATE SESSION VARIABLES
      if not rsUsers.EOF then
            session("sesFirstName") =  rsUsers("FirstName")
            session("sesLastName") =   rsUsers("LastName")
            session("sesLogin") =  rsUsers("Login")
            session("sesVariables") =  rsUsers("Variables")
            session("sesUserID") = rsUsers("ID")
            session("sesDepartment") = rsUsers("Department")
            session("sesEmail") = rsUsers("Email")
            session("sesSecurityCode") = rsUsers("SecurityCode")      
                              
      else
            'user not found? redirect to add user page
            response.redirect "newUser.asp?login=" & login      
      end if
      
      rsUsers.Close
      set rsUsers = Nothing
      adoCon.Close
      set adoCon = Nothing            
-----

I am presuming the IIS server the users are attaching to is in the same AD as the user and that IIS has integrated Windows authentication enabled.

I presume you are trying to do Single Sign-On (SSO) for this application to ease the users' pain while still protecting the integrity of the system to which "...only a few people..." need access without writing a huge check to CA for the AD named users' license fees and without making your environment overly complex.

There are several LDAP-centric ways you can do this without utilizing SiteMinder's LDAP interface.  You could, for example, create an XML or CSV file that contains the authorized users and compares the LOGON_USER to the entries in the list.  This requires some amount of administration (policies and procedures needed here) when users are added, changed or removed.

I hope this is somewhat helpful,

Walkabout