For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Webtop Return Without Reauthentication

Problem this snippet solves: By default if you hit "/" on a VS with a webtop assigned it will terminate the session and require reauthentication. This iRule will cause the user hitting "/" to be red...
Published Mar 07, 2017
Version 1.0
application delivery
BIG-IP Access Policy Manager (APM)
iRules
saml
security
SSO
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 23, 2017

Graham,

session.policy.result.start_uri
variable contains the webtop URL used after authentication. you can use it instead of recreating it!

this code also include multi-domain support.

when HTTP_REQUEST {
    if { ( [set MRHSession_cookie [HTTP::cookie value "MRHSession"]] ne "" ) and ( [ACCESS::session exists -state_allow $MRHSession_cookie] ) } then {
        if { [HTTP::uri] equals "/" && ([set start_uri [ACCESS::session data get -sid $MRHSession_cookie "session.policy.result.start_uri"]] ne "")} {
            if {![PROFILE::access domain_mode] || [URI::host [PROFILE::access primary_auth_service]] equals [HTTP::host]} {
            HTTP::redirect $start_uri
            }
        }
    }
}