For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

John_Gruber_432's avatar
John_Gruber_432
Historic F5 Account
Nov 28, 2006

Multiple authentication for resource group

I need to have Firepass REQUIRE authentication from multiple external sources. Eventually I need to have 1) Client side SSL cert and 2) Ad or web form authentication. By regulation I need two factor ...
BIG-IP Access Policy Manager (APM)
remote access
security
psilvas's avatar
psilvas
Icon for Altostratus rankAltostratus
Nov 29, 2006
Hi~

 

currently (v6.0) you can do two-factor auth with AD and client cert. There should be a check box right under your AD settings (in Authentication tab) for Require client certificate for user logon and (if you want) Perform additional client certificate check against Active Directory attribute. Check one or both, issue certs and voila. You can also require client cert for Basic http auth to external server and Form-based auth. Currently, however two-factor with AD and http auth is not supported. You can (after logon) post users FP creds to web applications for SSO at that point.

 

 

make sense?

 

 

ps