Forum Discussion
samo
Nimbostratus
NimbostratusAPM Specific Network Access per user
Hello,
I faced a case where the customer wants to use F5 APM as VPN to server internal employees and also partners.
For internal employees it is easy because they exist on Active Directory ...
Stewart_88212Nimbostratus
NimbostratusHi Samer,
First you'd need to separate out your internal and partner users. Perhaps give the partners a different URI to use when logging in
ie, https://FQDN-for-site/partnersYou can then check on the URI and send them to local DB authentication rather than AD.
Once they've authenticated to the local DB, you can use an expression in Resource Assign to check their username session variable in order to assign them the appropriate resources.
This is a pretty good reference when using the local user database. [https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-aaa-auth-config-11-4-0/4.html]
S