API calls to F5 VIP using Kerberos access policy

Hi there,

I have an application we put behind the F5 using a standard VIP. This application used Kerberos authentication and after being proxied through the F5 the Kerberos no longer worked. As a resolution I created a Kerberos access policy that uses a Kerberos AAA server to authenticate users on the front end, and then a Kerberos Delegation SSO to pass that kerberos auth on to the backend server.

An issue we've run into is that we have a service account attempting to do an API call to this application and it's failing. They're getting an error:

The content type text/html; charset=utf-8 of the response message does not match the content type of the binding (text/xml; charset=utf-8). If using a custom encoder, be sure that the IsContentTypeSupported method is implemented properly. The first 1024 bytes of the response were: ' BIG-IP logout page