Forum Discussion

cd's avatar
cd
Icon for Cirrus rankCirrus
Jul 10, 2019

OTP SMS with API (SMS Gateway)

Hello, I'd like to do OTP SMS via an HTTP API I'm reading this link but is it still up to date (February,2011) ? the VPE is still OK or maybe they are news things..   Should I still need the iR...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
  • Imran_Abid's avatar
    Imran_Abid
    Jul 15, 2019

    Hi cd,

     

    I'm using a hardware device SMSEagle as my SMS gateway with APM.

     

    As Neils rightly said above, there is no need to use an iRule.

     

    I'm using these VPE agents in this particular sequence:

     

    OTP Generate

    HTTP Auth (to send the OTP as SMS)

    Logon Page (to collect the OTP)

    OTP Verify

     

    Please refer to attached screenshots.

     

    I hope it helps.

     

     

     

     

     

     

Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Jul 14, 2019

It seems the documentation you are referring to is a little outdated. You don't need to use the iRule to create an OTP. Just use the 'OTP Generate' agent in the VPE.

 

The 'Variable Assign HTTP' is being used to match the AAA HTTP sms_auth object. You can see the fields 'Form Parameter for User Name' being set to 'to' and the 'Form Parameter for Password' being set to 'text'. These fields are being read from 'session.logon.last.username' and 'session.logon.last.password'.

 

Which SMS gateway are you using? If using MessageBird you could also use this code:

 

https://devcentral.f5.com/s/articles/send-an-one-time-password-otp-via-the-messagebird-sms-gateway-1112

 

Note that there are also other code snippets available for other SMS gateway providers.