Forum Discussion
navgup_66025
Nimbostratus
Jul 18, 2013irule to send traffic to correct pool
I have a requirement to send default https request to Kerberos_Pool but if authentication fails (kerberos SSO), fall back to Forms_Pool (form based login). I have tried different methods, including c...
Kevin_Stewart
Employee
Jul 18, 2013A few things to consider:
1. Are you referring to Kerberos SSO between APM and the server? And also Forms-based SSO between APM and the server? If so, and Kerberos fails, are you prepared to provide a username and password?
2. The AUTH events belong to the old Advanced Client Authentication (ACA) module and do not apply to APM.
3. If using TWO server side SSO profiles, from 1 above, and you do have a username and password to supply to Forms-based SSO, what you'd necessarily need to do is 1) save the request, 2) capture the Kerberos auth failure (401) in the response, 3) select a new SSO profile using the WEBSSO::select method, and then 4) replay the request.
The above isn't the most intuitive things, so please first elaborate if possible on your requirements.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects