For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tiwang's avatar
tiwang
Icon for Nimbostratus rankNimbostratus
Jun 07, 2013

SSO for webserver

Hi out there     I need an idea how I can awoid my users in cheating me.   I have a SSO setup where I through a client initiated webform do a SSO login to a webserver. After this the APM j...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 07, 2013
Okay, so you have two sets of users: external and internal. To prohibit internal users from going directly to the server, you would need to 1) force internal DNS to point to the APM VIP, 2) enable SNAT, and 3) set IP filters on the servers so that no HTTP traffic could get to it unless it came from the BIG-IP (self-IP).

 

 

For external users, and internal users forced through APM, you would need to create an SSO profile that takes the credentials from the APM logon page and posts them to the server's logon page.