Forum Discussion
Craig_Baker_187
Altocumulus
Mar 06, 2015Lazy Auth Sessions
I'm trying to use the SAML_AUTH modules in Access Policy to protect a webserver using shibboleth. That in and of itself is easy. I have an iRule that sends down headers to the server based on the a...
Michael_Jenkins
Cirrostratus
Mar 06, 2015As you mentioned, you could use an iRule that would kill the session (ACCESS::remove) and force a new one.
The other option would be to use an iRule prior to the session starting (APM Event Order) and use the ACCESS:disable command to disable the APM from processing that request. (Note: If you have an existing session and use that command, you may get some odd behavior. Be sure to also remove the APM cookies like
MRHSession
and LastMRH_Session
from the request so APM doesn't try to do anything with it.)
This is how I've gotten things like this to work in the past.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects