Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

MR_Freddy's avatar
MR_Freddy
Icon for Nimbostratus rankNimbostratus
Mar 04, 2020

Basic Auth Decoding for APM Session Variable

Hello Guys,   I am trying to find IRule to get the username and password from Authorization Header (401 Basic Authentication) and pass this variables to SSO credential Mapping Agent (NTLM V1 SSO)...
BIG-IP Access Policy Manager (APM)
irules
security
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee
Mar 04, 2020

Hello,

 

You can you get the username and the password with HTTP::username and password:

https://clouddocs.f5.com/api/irules/HTTP__username.html

 

And use Access::session command to set the session variables:

https://clouddocs.f5.com/api/irules/ACCESS__session.html

 

Then use the variable in the SSO Credential Mapping object. Or.....

 

Just use a 401 object in your VPE:

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-access-policy-manager-visual-policy-editor/access-policy-item-reference/about-logon-items/about-http-401-response.html