For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
May 06, 2016

SSO stopped working when Radius auth is added

Hi, we have deployed citrix VIPs using iApp template (f5.citrix_vdi.v2.3.0) using APM policy.   But,if I add radius authentication (sms auth provider) after AD authentication and before SSO crede...
application delivery
BIG-IP Access Policy Manager (APM)
iApps
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
May 09, 2016

Hi,

Radius auth does not rewrite password, it requires password to be stored in session.logon.last.password.

It seems that your VPE tree is:

Logon (User / AD password) --> AD Auth --> Logon (SMS password) --> Radius Auth --> SSO Credential mapping

it is the second logon page which replace password.

You can change box order to put SSO credential mapping before Radius Auth:

Logon (User / AD password) --> AD Auth --> SSO Credential mapping --> Logon (SMS password) --> Radius Auth