APM - Two Factor Authentication

Can you please clarify the scenario for the authentication process? User will enter username, password1, and password2 from the login page. APM will verify password1 with one AAA server and password2 with another AAA server?

 

 

Typically you should be able to pass the variables through VPE rules, when you define the Access Policy.

Andrew,

 

 

It is not possible to pass more than just a username and password to the authentication server. If you would like to do 2-factor auth, you would have to do the passcode auth first, and then I'd recommend going and doing auth using username and password once the passcode-based auth is successful.

 

 

As a side note, please let us know what exactly you're doing for Citrix. We have a new slick ICA proxy solution for XenApp/XenDesktop that is about to be published, and I'd love for you to give it a try.

Hi All,

 

 

It is working fine, basically the way we've done it,

 

 

is have password and password1 fields on the logon page.

 

 

run an Authentication item that will use the first password

 

 

then have an assign variable that changes the password ( session.logon.last.password = expr {[mcget session.logon.last.password2]} )

 

 

Then run the authentication item that uses the second Password.

 

 

And that is working fine for us.

 

 

Cheers

Posted By Michael Koyfman on 08/24/2010 07:29 PM

 

Andrew,

 

 

It is not possible to pass more than just a username and password to the authentication server. If you would like to do 2-factor auth, you would have to do the passcode auth first, and then I'd recommend going and doing auth using username and password once the passcode-based auth is successful.

 

 

As a side note, please let us know what exactly you're doing for Citrix. We have a new slick ICA proxy solution for XenApp/XenDesktop that is about to be published, and I'd love for you to give it a try.

 

 

We've actually been working with F5 guys in getting that running, we've basically been setting up a POC to see what we can do, and we have it running successfully with 2 factor auth, and running the ICA proxy stuff.

Hello- can you share code you are using to get 2 form factor working? can you also let me know how you are designating what site would have 2 form factor authenication ??

Are you looking for 2-factor setup with Citrix XenApp? If so, it is documented in our deployment guide that's posted on f5.com:

 

 

http://www.f5.com/pdf/deployment-guides/apm-citrix-xenapp-dg.pdf