Integration Requirements

Understand the technical and operational requirements for using the SiteMinder Exchange API, including performance standards.

Guidelines

As outlined in the API Services Terms of Use Agreement, these guidelines ensure the efficient and proper use of the Apps API.

All applications that integrate with SiteMinder must adhere to the following requirements. Applications with existing integrations may need to update their setup to comply. Due to the growing number of application installations, SiteMinder can no longer accommodate exceptions.

Failure to comply with these guidelines may result in the deactivation of the interface. If non-compliance is not resolved within three months of notification, SiteMinder reserves the right to disable the interface until corrections are made. In cases where non-compliance poses a risk to SiteMinder's production environment, the interface may be disabled immediately.

---

Application General

Response Time

Response time should not exceed 1000ms.

Content-Type

The ‘Content-Type’ for all SOAP XML messages must be application/xml; charset=utf-8.

SSL/TLS

Apps API supports TLSv1.2 and above. SiteMinder does not support self-signed SSL certificates.

Security

Encryption is provided by the transport layer via HTTPS. Each message contains a WS-Security (WSSE) UsernameToken SOAP header for authentication/authorization purposes. Each connecting Application must provide a secure web service endpoint to receive the reservation notifications.

---