For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kuerten_772's avatar
Kuerten_772
Icon for Nimbostratus rankNimbostratus
Feb 09, 2014

Issue with SSO network access

Hello team, We have SSL VPN configured for our users, we have two ressources one for portal access and the second one for network access. for sso we use http form type. the sso work fine with portal ...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 10, 2014

My guess here is that your SSO is not configured correctly. I would start by creating a very simple access policy that solely tests the SSO:

 

  1. START -> VARIABLE ASSIGN -> ALLOW

Assign the username and password session variables statically in the variable assignment agent. Again, the purpose of this policy is just to test SSO, so everything else is removed. Now unfortunately this is where it gets difficult to troubleshoot remotely, as a form-based SSO can be tricky to configure and highly dependent on the server's requirements. At a minimum though, you need to capture:

 

  1. What identifies a logon form (a specific URI, cookie, or header in the response)

     

  2. What identifies the actual logon form on the page (action attribute, form order, form paramater, ID attribute, or name attribute)

     

  3. What identifies a successful logon (presence of a new cookie or a redirect to a specific URI)

     

To find all of this information, you'll need to run a client side capture, access the application directly, and logon.