For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator

Table of Contents Introduction Lab guide Phase 1: Token Generation Phase 2: Token verification Related Content Introduction In our walkthrough we are refreshing an existing time-ba...
Published May 08, 2023
Version 1.0
application delivery
cloud
security
series-f5-access-security
Verified Designs
momahdy's avatar
Icon for Employee rankEmployee
Principal Technical Marketing Engineer - Focus on BIG-IP
View Profile
momahdy's avatar
momahdy
Icon for Employee rankEmployee
Jan 08, 2024

dupapa Thanks a lot for your comment, regarding your questions,

1- Yes, Another logon page.

2- For this to be acheived, we can put the validation within a macro and allow for multiple repeats, I will try this out in the lab and update the article with the results.

The OTP generate and verify relies on token being generated at F5, in some environments, there's a need for secret key used for generation and validation to be external to F5, from there the need for such approach was made. So, it's almost like we are creating a custom OTP validate plugin, will try out the macro approach and let you know.

Thanks again, 

Mohamed