Forum Discussion

bfrancom_123272's avatar
bfrancom_123272
Icon for Nimbostratus rankNimbostratus
Sep 25, 2015

APM Issue Injecting New Authorization Header

I have a policy that uses an Active Directory Authentication, then an Active Directory Query for client authorization. The server side is "dumb." It uses basic auth for authentication. So I inject a ...
BIG-IP Access Policy Manager (APM)
design
devops
security
bfrancom_123272's avatar
bfrancom_123272
Icon for Nimbostratus rankNimbostratus
Oct 26, 2016

No problem. Thanks for helping! The way the initial login is captured is via an iRule. I'm currently running tests with a rest client (postman & ARC)

when ACCESS_SESSION_STARTED {
    if { [HTTP::password] ne "" } {
    ACCESS::session data set "session.logon.last.username" [string trim [HTTP::username]]
    ACCESS::session data set -secure "session.logon.last.password" [string trim [HTTP::password]]
    }
}

The variable assign and sso of both policies are the same:

I can see in the APM log report that the session varibles are updating during the variable assign and SSO mapping, but not being handed to the backend: