For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Steve_W_85246's avatar
Steve_W_85246
Icon for Nimbostratus rankNimbostratus
May 29, 2013

Client Initiated SSO configuration in iRule

I have a situation where an in house application uses both Basic Authentication (Weblogic system prompt) as well as HTML form based login pages.   I wanted to try out the Client Initiated Forms ...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 31, 2013
A few additional questions:

 

 

1. Is the HTML form INSIDE the WL system? In others words, is it in the same session, same IP, same VIP?

 

 

2. Do you have to keep re-authenticating (via Basic) to the WL system throughout the session, or are further requests handled by a session token? Does the WL system expect the Authorization header in every request?

 

 

3. Can you potentially, by virtue of the first authentication, skip the second one (or do something else like HTTP headers)?

 

 

4. Is there a specific need for the client-initiated forms SSO over the more static forms SSO?