Forum Discussion

Mike_Roe_60070's avatar
Mike_Roe_60070
Icon for Nimbostratus rankNimbostratus
May 16, 2012

Integrating APM SSO with an existing webapp login form.

I need to initiate a SSO session on the F5 by logging onto an existing websphere application that posts j_username and j_password to the standard j_security_check servlet. The existing app is the curr...
security
Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Aug 21, 2014

I use this in an iRule to force an HTTP Authorization header to be sent to the backend server

when ACCESS_ACL_ALLOWED {
    set user [ACCESS::session data get "session.sso.token.last.username"]
    set password [ACCESS::session data get "session.sso.custom.last.password"]
    set authorization [b64encode $user:$password]
    set headerLine "Basic $authorization"
    HTTP::header insert "Authorization" $headerLine
}