Forum Discussion
SSO Form Post including additional dynamic parameter value (hidden)
Hi all,
Is it possible to implement a dynamic parameter inside an SSO Form POST configuration in F5 APM?
The tasks to be implemented:
- Because one of the hidden parameter value is dynamic (associated with a session ID which is different for every access), we need to read the value from the login page which would be presented to the user (login form). I suppose this is possible by implementing an iRule and parsing the server response on the right URL response
- After that, it would be necessary to save this value in a session variable. Again, I think this is possible wihtin the same iRule.
- Finally, we would need to specify that variable as the required value for the additional FORM Post parameter/values, inside the SSO Form POST APM configuration or
- To implement the SSO Form POST manually by means of another iRule, maybe using the other SSO Form post Client initiated and intercepting the automatic JS hidden Form POST an then, changing the content before sending to the server, by filling the additional param from the session variable
Anyone can please indicate if it's possible and the best way to do it in APM?
Thanks in advance,
PD
Example of a real POST Form containing a dynamic param (of course, apart from "username" and "password"):
- Dynamic hidden param => javax.faces.ViewState " inputUserName=USERNAME&inputPassword=PASSWORD&submitButton=Sign+In&SignInForm_SUBMIT=1&javax.faces.ViewState=f33Cenm3zKZSHK7tFE6LfyVrJOJGJyYE8tKeefB4D21JFzYqbBfv42SZjL8IlTe62EW%2FPKo%2BdiuRBhv1ghTdus9D%2BQuFo1aR8YvNzu08NSx8GsVaMqf8evVSzy3YtDFr
3 Replies
- Eric_St__John
Employee
This is possible with the "Forms - Client Initiated" SSO profile.
- Francisco_Abel_
Nimbostratus
Hi Eric, thank you for your suggestion. I will try the possibilities of the client initiated form post.
KR, Francisco
- Francisco_Abel_
Nimbostratus
Hi again,
After trying the client-initiated Form method if works OK. The key is to not define the dynamic form parameter inside the "Form Paramters" APM configuration window. This allows the normal browser behaviour by automatically filling the hidden values. I have verified the JS from F5 only modifies the defined parameters (makes sense). The trick of "pivoting" the SSO action thru the user's browser is really good for this case.
Thanks a lot, Francisco
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com