For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kuerten_772's avatar
Kuerten_772
Icon for Nimbostratus rankNimbostratus
Jan 31, 2014

APM SSO Issue

The scenario is this:   Application server "Liferay" F5 Big-IP APM v11.4.0   When using the weblogin, we are to authenticate successfully, but the server app weblogin page remains open and dis...
Cody_Green's avatar
Cody_Green
Icon for Employee rankEmployee
Jan 31, 2014

Hi,

 

So it looks like your start URI is a little to specific. The attributes you have included in the start URI need to be sanitized for what is user specific and what is page specific.

 

Do most of your pages us the following URL: /web/intranet/connexion?

 

If so, you may want to use the forms - client initiated SSO method instead. This is very useful in java applications that all use the same base url and the attributes included in the URL to define what the page is can vary in location/order.

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-2-0/3.html