For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
May 06, 2016

SSO stopped working when Radius auth is added

Hi, we have deployed citrix VIPs using iApp template (f5.citrix_vdi.v2.3.0) using APM policy.   But,if I add radius authentication (sms auth provider) after AD authentication and before SSO crede...
application delivery
BIG-IP Access Policy Manager (APM)
iApps
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 06, 2016

Hello,

 

If you are using Wyze terminals or receiver clients, I think that SMS authentication is not supported by the client side.

 

But when you access your citrix apps using the webtop, it should works. Pay attention that the session.logon.last.username variable will be used by the radius auth. So that you need to save the username in an extra variable before radius auth occurs (e.g. session.logon.last.username1) and change the SSO Credential mapping username to fit that change

 

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
May 09, 2016
Hi, I've tested it and verified session.logon.last.username through message box and it stayed the same all the time. It means that it is not changed during Radius auth process.