Forum Discussion

Scott_Larson's avatar
Scott_Larson
Icon for Nimbostratus rankNimbostratus
Oct 19, 2007

prevent Client Certificate prompt when navigating to other sites w/in your domain

When a user navigates to (xyz.company.com), I need to prompt them to supply a client certificate (I'm using Client Certificate "request" in the SSL Client Profile); if they do supply it, great (I have a downstream application servlet which authenticates them based upon their certificate subject). If they don't supply it, then the servlet forces them to perform username/password login. Either way, upon successful login, they get an encrypted login cookie.

 

 

The problem is, when they click to another site within my domain (xyz.company.com) which also has a Client SSL Profile that has Client Certificate set to "request"), they're prompted to supply their certificate again.

 

 

Is there any way to have the LTM check for the login cookie (or something else) so that they don't get prompted every time they switch to another one of the sites within my domain?

 

 

Thanks in advance,

 

Scott

 

 

No RepliesBe the first to reply