Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

ktm_2000's avatar
ktm_2000
Icon for Altostratus rankAltostratus
Nov 14, 2023

Customizing logon error messages

Folks, I've putting a MFA logon process and am trying to figure out how to customize the error messages a person sees when they are inputting OTP values.    I started off with the default workflow ...
application delivery
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Nov 15, 2023

Ah ok great sleuthing, sounds like you found the variable that contains your error: session.otp.verify.last.errmsg

So, all you have to do is set the text to be "Invalid Login. OTP error: %{session.otp.verify.last.errmsg}", and then when APM displays the error to the user, it will be dynamically generated from the authentication agent.