Single Sign On with LDAP authentication

This is certainly do-able, depending on how your back-end systems are checking for auth information. The BIG-IP can, indeed, authenticate against the LDAP systems you currently have. It's then just a matter of determining how that data needs to be stored in the user's session to ensure the back-end web-servers know they're already authenticated.

 

 

If your systems are looking for a cookie, that's something that's easy to insert via the BIG-IP, once a user is successfully authed in. All you would need is the HTTP::cookie insert command, once you've verified a user's credentials. You could then insert a cookie with the name/data you need at the back-end to prove the user is authenticated.

 

 

The documentation on this command is in the wiki here: Click here

 

 

Hope this helps,

 

Colin