For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bernd_9310's avatar
Bernd_9310
Icon for Nimbostratus rankNimbostratus
Jun 02, 2016

APM SSO and WebFOCUS8 by Informationbuilders

Hello,

 

I have been trying to implement single sign-on for Webfocus8 by Informationbuilders. In the APM module we have a full webtop with portal icons for several applications including Webfocus. I first tried simple forms based SSO, later client-initiated forms based SSO, since it offers additional configuration options. However, nothing seems to work. I end up with the Webfocus login screen being shown and have to enter credentials manually to logon. The issue is not with the userid/password. Those are stored in the right APM variables, that we use for other applications as well. It seems that APM can't recognize the login form and hand over the variables. The logon page of Webfocus doesn't use a simple HTML form. It is built with DIV sections and posts the parameters by invoking a javascript function. It seems that some security features are implemented as well, since a randomized number is handed over during POST. Has anyone successfully implemented SSO with APM and WebFocus8 ? I'd be glad about any hint ...

 

The TMOS version in use is 11.6 with hotfix 5.

 

regards Bernd

 

application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)

2 Replies

  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jun 02, 2016

    Hello Bernd, in this cas you definitively need to play with client initiated SSO as the generic one can't manage dynamic type login forms. having said that, that is not really helping you ... you may be required in this case to create some custom javascript to feed apm logon. Did you have the chance to have a look to some examples in the doc ? https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/23.htmlunique_764946769.

     

    i'll ask support if they can help in such case to build the config.

     

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Jun 02, 2016

    Hi Bernd,

     

    You will have to add custom javascript in the Client Initiated SSO configuration to interact with your page. We have been able to successfully configure some very complex applications to work with SSO.

     

    We would need to see your logon form to help formulate the custom javascript.

     

    -Seth