BIG-IQ SSO

Just to clarify, are you wanting to use BIGIQ to configure SSO and push the config to an APM or are you wanting to have BIGIQ SSO you into the APM UI?

-Seth

I want to put the management GUI of BIG-IQ behind APM / SSO.

Hey Walter,

Here is what I have come up with so far...

Here is the SSO config that I applied to the Access Policy.

apm sso form-basedv2 /Common/BigIQ_SSO {
    forms {
        loginform {
            controls {
                passwd {
                    secure true
                    value "%{session.sso.token.last.password}"
                }
                username {
                    value "%{session.sso.token.last.username}"
                }
            }
            request-value /ui/login/
            submit-javascript ""
            submit-javascript-type custom
        }
    }
}

You will also need to add the following variable assign in the VPE.

apm policy agent variable-assign /Common/portal_wizard_ap_act_variable_assign_ag {
    variables {
        {
            expression "mcget -secure {session.logon.last.password}"
            varname session.sso.token.custom.password
        }
    }
}

Let me know if this works for you.

-Seth