For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kuerten_772's avatar
Kuerten_772
Icon for Nimbostratus rankNimbostratus
Feb 09, 2014

Issue with SSO network access

Hello team, We have SSL VPN configured for our users, we have two ressources one for portal access and the second one for network access. for sso we use http form type. the sso work fine with portal ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 10, 2014

Okay, just to level set:

 

  1. You have an "external" access policy that establishes the webtop (with all of the links).

     

  2. You have an "internal" access policy applied to the application. It has a simple START->ALLOW visual policy, and an SSO profile assigned.

     

  3. The session variables required for the internal SSO profile to work (ex. session.logon.last.username, session.logon.last.password, etc.) are created in the external access policy.

     

As a test, configure the internal application so that it can be accessed directly (from some location) and statically assign the required session variables in the internal access policy's VPE. If your SSO profile is configured correctly, you shoould be able to seamlessly SSO to the application without getting prompted for authentication.