Forum Discussion
tiwang
Nimbostratus
Jun 07, 2013SSO for webserver
Hi out there
I need an idea how I can awoid my users in cheating me.
I have a SSO setup where I through a client initiated webform do a SSO login to a webserver. After this the APM j...
tiwang
Nimbostratus
Jun 20, 2013Hi Kevin
The username and passwords are URL's embedded in a javascript which is build by the webserver and send to the client - like this:
function PartShoppingCart()
..{
if (document.all.UPLOAD.style.visibility != "visible")
document.all.UPLOAD.style.visibility = "visible" ;
else
document.all.UPLOAD.style.visibility = "hidden" ;
document.all.UploadWindowAction.value ="PartShoppingCart";
document.Validform.target = "UPLOAD" ;
document.Validform.action = "/web/script/PartShoppingCart/PartShoppingCartStart.asp?css=/web/css/adp.css&CompanyNo=9990&TargetFrame=Service_Frame&UserGroupId=User1" ;
document.Validform.method = "POST" ;
document.Validform.submit();
..}
function OrderHistorySearch()
{
if (document.all.UPLOAD.style.visibility != "visible")
document.all.UPLOAD.style.visibility = "visible" ;
else
document.all.UPLOAD.style.visibility = "hidden" ;
document.all.UploadWindowAction.value ="PartOrderHistory";
document.Validform.target = "UPLOAD" ;
document.Validform.action = "/web/script/PartOrderHistory/OrderHistoryStart.asp?css=/web/css/adp.css&CompanyNo=9990&Communities=Com1&UserGroupId=User1&Password=abc123&dateformat=dd/MM/yyyy&TargetFrame=Service_Frame" ;
document.Validform.method = "POST" ;
document.Validform.submit();
}
Regarding the SSO config - I thought that the next thing I got was a redirect to a new page but in fact it sets a cookie and publish a new page where I can select a group-membership (Community). But - here is it where the chunking gives some problems - it seems to me that the APM SSO function cannot always find the form depending on how the chunking is set in the HTTP profile (and why do I fiddle with this at all - because if the chunking is set so that I can detect the logon form a Java script send later is corrupted - it should build a nice huge table on the screen where the user could fill in items to order)
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
