Forum Discussion
Injeyan_Kostas
Cirrus
Depenging on how username is provided in login page, session.logon.last.domain variable might not be setted.
session.logon.last.domain is used be default on NTLM sso config.
As you have AD Auth on the VPE, I would suggest changing the sso configuration to use session.ad.last.actualdomain as the domain source and try again.
Vladimir_Akhmarov
Aug 12, 2024Cirrus
Unfortunately that did not helped me :(
I tried both options:
- Use session variable "session.ad.last.actualdomain" for NTLMv2 SSO object. That value exactly matches "ntlm-domain" under apm sso ntlmv2 /PARTITION/Exchange_ntlmv2
- Use session.logon.last.domain and set "ntlm-domain" to DOMAIN (NetBIOS domain name) under apm sso ntlmv2 /PARTITION/Exchange_ntlmv2
Seems that something else stops APM from attaching SSO to the back-end request
Moreover all my tests shows now that APM did not send any request to the /EWS/Exchange.asmx even after I reverted all the changes back. BIG-IP reboot did not helped :)