For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yves_werniers_1's avatar
yves_werniers_1
Icon for Nimbostratus rankNimbostratus
Sep 25, 2014

APM with OTP to identify 'trusted client'

Hello,   I have been asked to figure out if we can use APM for the following scenario. If someone wants to log in to our systems (secured by APM), don't just use username and password. Use an OTP ...
BIG-IP Access Policy Manager (APM)
design
security
Simon_Waters_13's avatar
Simon_Waters_13
Icon for Cirrostratus rankCirrostratus
Sep 29, 2014

Some of the 3rd party services do this sort of thing.

 

Duo for example has a "remember my browser", and typically these can be integrated cleanly using either supplied code or as radius server (although I think Duo uses an additional machine which is not elegant).

 

Having just been down a similar route and thinking a third party service might have been quicker, simpler and easier to maintain. Although sometimes it is desirable not to rely on third party services.