F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

jba3126's avatar
jba3126
Icon for Cirrostratus rankCirrostratus
May 17, 2017

Urgent assistance needed with ClickJacking iRule or HTTP Policy to cover multiple domains

We have an SSO (Single Sign On) solution that front ends several applications that use iFrames. It is also accessed via different domains that go back to the same VIP. Granted I don't fully underst...
iRules
LTM
security
Anesh's avatar
Anesh
Icon for Cirrostratus rankCirrostratus
May 18, 2017

Try this

when HTTP_RESPONSE {
set host [string tolower [HTTP::host]
if {[class match  $host contains URLdatagroup]}
{
HTTP::header replace X-Frame-Options "ALLOW-FROM https://sso1.site.com"
}
else
{
HTTP::header replace X-Frame-Options "ALLOW-FROM https://sso2.site.com"
}

}