Forum Discussion
Bunkemannen
Nimbostratus
NimbostratusCheck credentials of a Windows App and AD membership in APM?
Hi, We have a situation with an old windows app(not a browser) that has connections to backend systems published in our LTM/F5, is it possible (maybe by apm) to check if the logged in user (starting the app) is a member of a specific AD group,( maybe by Client NTLM auth?) it must be a seamless connection of course grabbing the credentials?
KinEmployee
Yes, you can use the BIG-IP APM access policy to design your authentication and authorization flow, in this case, AD/LDAP Auth + AD/LDAP query for a specific AD Group. These will be helpful:
- Article: K16306 - AD and LDAP Group Resource Assign feature (f5.com)
- Article: K12193 - Configuring nested groups in Active Directory for authentication, query, and resource assignment (f5.com)
- Article: K15008 - Implementing a unique Microsoft Active Directory user account for AAA in the BIG-IP APM system (f5.com)