Quick answers to common Maverics Identity Discovery tool questions.

How can I learn more about accelerating my migration with Maverics?

We'd love to explore the results you have discovered and help get you on your way with a successful migration. Please contact us by scheduling a demo.

What do I need to get started?

That's simple! Only a couple things:
  • You need to download the FREE Maverics Identity Discovery Tool. You can register to get the tool from here. Check your email to get a link to download the tool. If you have any trouble with this, contact sales.
  • The tool supports SiteMinder 12.8 or higher and to run the tool you need Admin access.

General Questions

What Identity Provider (IdP) and version does Discovery currently support

Discovery currently works with SiteMinder 12.8 +.

What information and access credentials do you need to run Discovery for SiteMinder 12.8?

You will need both the base URL path for accessing your instance of SiteMinder as well as admin credentials to run Discovery.

What additional IdP versions of Discovery will be released and when?

We regularly evaluate the needs of businesses like yours and would love to hear from you about the version you’d like to see next. Reach out at [email protected] and let us know which legacy IdP version of Discovery would be most valuable to you.

Does Discovery share any information about my SiteMinder environment outside of my workstation?

No - Both components of the Discovery tool (the Command Line and Browser Interfaces) run locally on your workstation and no sensitive information or data is shared externally. The data and visual report returned during the Discovery experience remain secure and private to your organization.

Will running Discovery cause any impact on the current access experience of my users or degrade system performance in any way?

No - The Discovery tool is a read-only solution, and will not affect your users’ experience in any fashion. Further, Discovery has no ability to modify or affect existing SiteMinder rules or policies within your current environment.

Command Line Interface (CLI)

Which version of the Discovery software should I download?

You should select the version (MacOS, Windows, or Linux) that matches the workstation used in your workflow path to access your SiteMinder environment today.

Browser Interface

What filter operators can I use in the Search bar to better understand my Discovery data?

You can use plain text terms to add filters to your search parameters in the Browser Interface, such as a Realm’s name. When you add additional filter terms, know that they are combined with an implied “and” operator and the list of results will get smaller with each additional search term.

How is the Complexity Score assessed and what are the units of measure?

Complexity is a measure of the relative difficulty any given realm will be to migrate using Maverics due to its structure and interdependencies. There are three units of measure for Complexity (Low, Medium, and High) and they are defined as:
Maverics Solution
• Header count under 20
• Rule/Policy count under 20
• No active responses
• No active rules
The simplest realms to migrate with Maverics using standard configurations.
Meets at least one of these conditions: • Header count over 20
• Rule/Policy count over 20
• At least 1 rule defined with a regular expression
These realms can be migrated with some customization of the Maverics configurations.
Meets at least one of these conditions: • Has an active rule
• Has an active response
These realms can be migrated by leveraging Maverics service extensions.

What does the measure of “Traffic” represent?

Traffic is a numerical count of the number of authentication events that have accessed a particular Realm over the duration of the imported logs. This allows you to understand which Realms see the majority of usage relative to others in Discovery’s single view of your SiteMinder 12.8 environment. In order for traffic to be incorporated in the discovery you need to Load SiteMinder traffic.
The Discovery tool's Browser Interface will also tell you hidden policy characteristics such as Filter Path, Filter Class, regular expression usage, and app interdependencies.


How can I share the results of my Discovery experience with other stakeholders on my team?

There are two ways that you can share your results:
  • The simplest option is to use the “Generate Report” option found on the Browser Interface to generate a static PDF version of your results that can be emailed to others on your team.
  • You can share the exported .json file with others so they can explore the results on their computer. Simply have them download and run the CLI. They can pick up the next steps outlined in the section titled: "Open results in a browser".

What does the Complexity Score allow me to do?

The Complexity Score will allow you to prioritize Realms based on the relative level of effort it will take to migrate your entire SiteMinder environment to a new target Cloud IdP. The more Realms you have that fall into the “Medium” and “Hard” categories, you can infer that the lift involved will require more time and resources.
The good news is that Strata’s migration experts can help you understand what that means in practical terms and are available to help you begin planning your migration strategy. You will be pleasantly surprised to learn how simple the migration process can actually be when you can eliminate manual integration coding.
Visit us at to learn more and schedule a free migration strategy session with one of our experts at [email protected].