APM Policy, How to failback to login page
Dear All,
I am trying to build a APM policy with an external web page for login (i.e. http://www.externalloginpage.com).
The external login posts, back to the F5 my.policy uri. The post is authenticated by APM and AD authentication.
I have created custom branches for the AD Authentication object based on session.ad.last.authresult and session.ad.last.errmsg parameters, for separating the different AD authentication errors. Based on the values of this parameteres I want to redirect back to the external login page + custom html parameter for pointing out the error, i.e http://www.externalloginpage.com?error=00001.
If I do this, the APM policy never reaches the "DENY" block, and the initial APM session is not killed. Then, at the next post of credentials to the my.policy page, I get the following error:
Your session could not be established.
Access was denied by the access policy. This may be due to a failure to meet access policy requirements. If you are an administrator, please go to Access Policy >> Reports : All Sessions page and look up the session reference number displayed above. To open a new session, please click here
Does anyone know how to tackle this problem, by either forcing the old session to be killed, or try to reusing it, or by any other method that I cannot think of ?
Any help would be appreciated.
Thanks,
George