Access Troubleshooting: BIG-IP APM OIDC integration
Table of Contents
Introduction
Implementation and troubleshooting
Check the logs
Case 1: Connection reset after authentication
Troubleshooting steps:
Case 2: Expired JWT Key...
Published Jul 08, 2024
Version 1.0
momahdy
Employee
Employee
sinum
Altostratus
Altostratuswe are using f5 APM V17 in APM we have- session inactivity timeout - 15mins after reaching 15mins, if we enter browser displaying default F5 page - vdesk/hangup.php3 *expectation - upon reaching 15mins, it should automatically redirect to landing page. How to do this can someone give me some idea?
momahdyEmployee
EmployeeHi sinum ,
The intention of such URI is to clear user session as you mentioned due to the timeout value, you ca use this iRule to change this URI to the main one.
when CLIENT_ACCEPTED {
ACCESS::restrict_irule_events disable
}
when HTTP_REQUEST {
if { [HTTP::uri] equals "/vdesk/hangup.php3" } {
ACCESS::session remove
HTTP::redirect "/"
}
}
let me know how it goes.
- sinum
Thanks for the response, but this is based on http trigger, is there any way to redirect automatically landinguri instead of waiting for client action ?
- momahdy
There's a mention by another gentleman in this forum about editting the logout page to point to initial landing page, it's about customizing the logout.inc in the Access profile settings.
APM access policy default logout URI override based on landing URI? | DevCentral
Some important considerations when upgrading APM with advanced customized profile.
https://my.f5.com/manage/s/article/K38601341