F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Mike_174431's avatar
Mike_174431
Icon for Nimbostratus rankNimbostratus
Oct 17, 2014

How to pass credentials via scripts

Hello,

 

We recently rolled out f5 APM in front of our public facing websites. We have several clients that use bots or scripts (.NET c code, actually) to "web scrape" data from our HTML pages.

 

Is there a way to set-up APM so that they can pass credentials with their requests and have them authenticated, without having to be presented a manual login page?

 

Thanks -Mike

 

BIG-IP Access Policy Manager (APM)
management
security

2 Replies

  • Stewart's avatar
    Stewart
    Icon for Altostratus rankAltostratus
    Oct 17, 2014

    Hi Mike,

     

    You don't have to have a login page to use APM.

     

    One idea would be to use a client certificate check when your clients access your public facing websites. If they have a client certificate, that you issue, they get through and can scrape away.

     

    Stewart.

     

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Oct 18, 2014

    Yes you can from 11.4. You can use an irule to create a Access Session based on uri or something else. You can retrieve the credential in the header for instance and create the session. Irule commands are ACCESS::session create and ACCESS::policy evaluate.