Forum Discussion

THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Feb 03, 2015

How to POST data to specific page after APM authentication?

Is there a way to POST data gathered during authentication to specific web page.

 

  • using SAML federation to to authenticate the user and to get extra info (like e-mail address)
  • the application is IIS based and uses local shared credentials to sign in with NTLM SSO
  • the application needs the extra info POSTed to specific page as user information and for it to create the app session

SAML federation/attribute extraction to APM session variables is ok. Similarly NTLM SSO works. Question is how do the POSTing of the data after the auth? POST form/data are in the body (content/payload), not in headers, nor as parameters. Do I need to use iRule for this, which event?

 

application delivery
BIG-IP Access Policy Manager (APM)
design
devops
iRules
security

1 Reply

  • Amit_Karnik_269's avatar
    Amit_Karnik_269
    Icon for Nimbostratus rankNimbostratus
    Feb 03, 2015

    Do you need the data to be sent via POST only ? If so then you would need an iRule. Add the General Purpose - iRule Event to your policy with a name lets say "Event1"

    Now add an iRule to your virtual server for Event1 and then use SIDEBAND to POST out your data.

    when CLIENT_ACCEPTED {
        ACCESS::restrict_irule_events disable
}
when ACCESS_POLICY_AGENT_EVENT {
        if { [ACCESS::policy agent_id] == "Event1" } {
            SIDEBAND::connect -destination ....
            SIDEBAND::send "POST ..... "
        }
}

    If you are just trying this to log data, instead of POST you could use the policy General Purpose - Logging to send out data to a remote log server.