Forum Discussion

Luca_Comes's avatar
Luca_Comes
Icon for Cirrus rankCirrus
6 years ago

Google Authenticator on APM

Dear all, I'm trying to deploy two factor authentication to protect my application with Active Directory and Google Authenticator. I have now configured LTM and APM as descrbed here https://f5-agili...
application delivery
BIG-IP Access Policy Manager (APM)
Luca_Comes's avatar
Luca_Comes
Icon for Cirrus rankCirrus
6 years ago

HI Jason,

thank you, I'd also prefer to avoid this and my idea is to store the secret inside an AD attribute. I think writing on LDAP is simpler than do the same on datagroup. Is it possible from APM iRule or something like this?

 

Thanks

 

Luca

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    6 years ago

    I'm not sure that's a safe path to walk down. You could potentially update AD attributes via an iRules sideband call to and AD API, but same cautions would apply. If only needed to be semi-permanent to reduce the frequency, you could store the code in table memory, which can be persistent until reboot, and *could* be queried by an external script to pull the data and update into your AD attributes.