Forum Discussion
tiwang
Nimbostratus
Jun 07, 2013SSO for webserver
Hi out there
I need an idea how I can awoid my users in cheating me.
I have a SSO setup where I through a client initiated webform do a SSO login to a webserver. After this the APM j...
tiwang
Nimbostratus
Jun 20, 2013Hi Kevin
The username and passwords are URL's embedded in a javascript which is build by the webserver and send to the client - like this:
function PartShoppingCart()
..{
if (document.all.UPLOAD.style.visibility != "visible")
document.all.UPLOAD.style.visibility = "visible" ;
else
document.all.UPLOAD.style.visibility = "hidden" ;
document.all.UploadWindowAction.value ="PartShoppingCart";
document.Validform.target = "UPLOAD" ;
document.Validform.action = "/web/script/PartShoppingCart/PartShoppingCartStart.asp?css=/web/css/adp.css&CompanyNo=9990&TargetFrame=Service_Frame&UserGroupId=User1" ;
document.Validform.method = "POST" ;
document.Validform.submit();
..}
function OrderHistorySearch()
{
if (document.all.UPLOAD.style.visibility != "visible")
document.all.UPLOAD.style.visibility = "visible" ;
else
document.all.UPLOAD.style.visibility = "hidden" ;
document.all.UploadWindowAction.value ="PartOrderHistory";
document.Validform.target = "UPLOAD" ;
document.Validform.action = "/web/script/PartOrderHistory/OrderHistoryStart.asp?css=/web/css/adp.css&CompanyNo=9990&Communities=Com1&UserGroupId=User1&Password=abc123&dateformat=dd/MM/yyyy&TargetFrame=Service_Frame" ;
document.Validform.method = "POST" ;
document.Validform.submit();
}
Regarding the SSO config - I thought that the next thing I got was a redirect to a new page but in fact it sets a cookie and publish a new page where I can select a group-membership (Community). But - here is it where the chunking gives some problems - it seems to me that the APM SSO function cannot always find the form depending on how the chunking is set in the HTTP profile (and why do I fiddle with this at all - because if the chunking is set so that I can detect the logon form a Java script send later is corrupted - it should build a nice huge table on the screen where the user could fill in items to order)
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects