Forum Discussion

awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus
Mar 01, 2023

F5 edge client with OIDC and yubikey

Hi All  i am implementing oAuth with OIDC - it is woking fine when logging on through the browser but failing when trying edgeclinet - i have configured oAuth setting on the connectivity profile but...
application delivery
awan_m's avatar
awan_m
Icon for Cirrostratus rankCirrostratus

thanks for this - my authentication provider is forgerock and oAuth with openid is working -

the problem is the Edge client - as you showed in your video it should open the browser and authenticate and VPN should establish - and that happens - but it also opens its embidded browser where yubikey fails.

Question how do i configure it in a way where iy does not open the embidded browser?embedded

Matt_Dierick's avatar
Matt_Dierick
Icon for Employee rankEmployee
Mar 13, 2023

If the embedded browser opens, it means OIDC edge client config is wrong. It should open a real browser window.

Check your edge client config.

  • awan_m's avatar
    awan_m
    Icon for Cirrostratus rankCirrostratus
    Mar 13, 2023

    Hi - couple of questions 

    1 - under - 

    i have configured it as a client - with client ID and secret 
    2 - and in visual policy editot - i have used oAuth client - instead of oAuth Scope
    and all of this works fine when i use the browser - but the edge client has issues 
     
    what do i need to do 
    do i need to configure 0Auth server entity as resource - 
    and then use 0Auth Scope in visual policy editor?
    and my OAuth server is Forgerock
    Thanks 
    • awan_m's avatar
      awan_m
      Icon for Cirrostratus rankCirrostratus
      Mar 15, 2023

      Hi i watched the video multiple times and tries to set it up as recommended in the video.

      couple of questions

      what should i put in the following in oAuth setting - for edge client

      Complete Redirection URI: -- 

      secondly - if i leave that blank - the edge client keeps going to login page - and login process