Forum Discussion
Ahsan_2380
Nimbostratus
NimbostratusSingle Sign On with LDAP authentication
Hii...we have a web application on which we use LDAP authentication..we want big ip traffic to be authenticated by LDAP..which i guess can be done by auth modules...but the main catch is once the user gets authenticated..he should have all the access on the page...i.e big ip should operate as a single sign on...searched a lot for this..can this be done using big ip...guess we have to hold the data in cookies...
- This is certainly do-able, depending on how your back-end systems are checking for auth information. The BIG-IP can, indeed, authenticate against the LDAP systems you currently have. It's then just a matter of determining how that data needs to be stored in the user's session to ensure the back-end web-servers know they're already authenticated.
If your systems are looking for a cookie, that's something that's easy to insert via the BIG-IP, once a user is successfully authed in. All you would need is the HTTP::cookie insert command, once you've verified a user's credentials. You could then insert a cookie with the name/data you need at the back-end to prove the user is authenticated.
The documentation on this command is in the wiki here: Click here
Hope this helps,
Colin
