Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
May 14, 2014

Understanding F5 APM and NTLM Auth

Right now I'm trying to implement a solution that will do the following:   Internal User goes to our SSO portal sso.corp.com I don't want this to prompt internal users for credentials (from the ss...
BIG-IP Access Policy Manager (APM)
design
security
Julio_Navarro's avatar
Julio_Navarro
Icon for Cirrostratus rankCirrostratus
Apr 01, 2015

Hi Naheed! Our domain name (mydomaincorp.com) is different from realm domain (mydomain) NTLM process in the LTM was getting confussed - it strip down the domain name - mydomaincorp and was trying to authenticate with it as if was the realm domain.

 

For example: john@mydomaincorp.com -> mydomaincorp/john

 

F5 will have solution solved for version 12.

 

At the end, I decided to use this method:

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/9.html

 

Hope this helps.