F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator
Published May 08, 2023
Version 1.0Was this article helpful?
Hello mmahdy!
Thanks for your sharing of those technical details!
I have some questions realted to your technical details:
that is, when the times of failuare is less than 3, the APM evaluation process should flow to the ga_code_submit again rather than the Deny ending.
for instance, the built-in OTP Verify with VPE supports max 3 attempts without terminating the ongoing APM evaluation process.