F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Martin_Foidl's avatar
Martin_Foidl
Icon for Cirrus rankCirrus
Feb 04, 2016

LTM+APM SSO only for designated Subnets

Hi,   we have a Problem we have configured a virtual server with an access policy and NTLM-SSO. We use the authentication only for users of pubic subnets. If a user comes out of a private subnet w...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
SSO
vpe
Martin_Foidl's avatar
Martin_Foidl
Icon for Cirrus rankCirrus
Feb 05, 2016

I think I am doing something wrong writing the iRule

 

I created an iRule "xxx" containing

 

when ACCESS_POLICY_AGENT_EVENT {

 

set WEBSSO::disable }

 

Then I added the iRule Event in a Box with the ID xxx in the VPM and attached the iRule to the VS but it will not work :/

 

in LTM Log I get

 

TCL error: /REVERSE_PROXY/apm_disableSSO - can't read "WEBSSO::disable": no such variable while executing "set WEBSSO::disable"