Forum Discussion

Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
May 30, 2014

apm sso inline javascript

Hi all,   I'm trying to implement APM+SSO (form-based client-initiated) on a web-application. The form detection seems to work fine, because I can see injected Javascript in the page source on cli...
BIG-IP Access Policy Manager (APM)
security
kunjan_118660's avatar
kunjan_118660
Icon for Cumulonimbus rankCumulonimbus
May 30, 2014

For Firefox, you can disable content security policy.. of course it brings down the security.

 

 

In address bar, type about:config and search for security.mixed_content.block_active_content. Double-click it and change its value to false.

 

 

Or you can try Form based SSO, instead of the client initiated Form SSO.

 

Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
Jun 02, 2014
I already tried form based SSO, but I could catch the logon form by URI, with client-initiated form-based I did it by header field (Referrer), which worked ok. I think turning of security isn't a way to go for a public application. regards, Philipp