For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

michael_61082's avatar
michael_61082
Icon for Nimbostratus rankNimbostratus
May 08, 2010

Single Sign On - Cookie + Basic Auth

I am currently using an ISAPI filter, basic authentication, and a cookie to achieve single sign on for a portfolio of web applications/servers. I'd like to be able to cut out the ISAPI filter for ea...
application delivery
dev
devops
iRules
michael_61082's avatar
michael_61082
Icon for Nimbostratus rankNimbostratus
May 12, 2010

I was planning on the anonymous logon page to verify against LDAP and set cookie[s] based on the response from the web server.

 

Is "AUTH_WANTCREDENTIAL" the correct event to "intercept" the 401 challenge to the browser?

 

 

I was thinking something like this...

 

when AUTH_WANTCREDENTIAL {

 

 

Logic to check for cookie set on "login" page

 

 

IF Cookie Not Found

 

 

HTTP::respond 302 Location ]

 

 

}