For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tjp's avatar
tjp
Icon for Nimbostratus rankNimbostratus
Feb 26, 2015

APM redirect to /my.policy stripping POST data

I have a condition where an unauthenticated user sends a POST request to a F5 virtual server running Access Policy. As part of the authentication process, the F5 redirects the original POST to /my.po...
BIG-IP Access Policy Manager (APM)
security
Andy_Turner's avatar
Andy_Turner
Icon for Nimbostratus rankNimbostratus
Nov 11, 2016

Sorry, no I didn't get anywhere with it, partly because I was able to solve the issue another way. We asked the Service Provider to send the requests using another method (instead of HTTP POST).

 

I don't seem to have even had a response to the call I put in other than the initial confirmation I'd submitted one, and it doesn't even appear in my list of calls on the support site...

 

Assuming you're having issues with a SAML Service Provider submitting POST data, perhaps you could ask them about doing it differently too?