Authentication and Authorization / Forms / XML

Hi

 

 

I am looking to implement a scenario where LTM / ASM and APM are deployed. Our authentication will be forms based. We will store users in an xml store. Essentially this is a reverse proxy scenario - we are fronting a number of applications.

 

 

1) How can Forms Auth on BIG-IP pull users from an XML file. Is this just BIG-IP pointing to the form on the external authentication server? Do I need a custom iRule?

 

 

2) Once authenticated I need a way for users to gain access to resources based on their level of Authorisation - 1,2,3 or 4 for example. Is this possible with an irule? So if you have level 4 you can access more than level 1.

 

 

Not sure if this would be possible with an irule - unsure how to trigger the action. I would of thought our developers would control this from the server-side. Is there someway of taking the response from successful authentication and using this in an irule?

 

 

3) I don't believe I can use session variables from APM as this is forms auth.

 

 

Thanks