One Time Passwords via an SMS Gateway with BIG-IP Access Policy Manager

One time passwords, or OTP, are used (as the name indicates) for a single session or transaction.  The plus side is a more secure deployment, the downside is two-fold—first, most solutions involve a ...
Published Feb 08, 2011
Version 1.0
adn
automation
BIG-IP
BIG-IP Access Policy Manager (APM)
dev
industry
management
monitoring
news
security
Owe_69641's avatar
Owe_69641
Icon for Nimbostratus rankNimbostratus
Apr 26, 2011
To support international mobile numbers (e.g. + or 00 prefix), one cannot use the expr function in "Variable Assign HTTP" as this will lead to octal conversion of the number or dropping the + sign. Instead of "expr { [mcget {session.user.otp.mobile}]}", simply "mcget {session.user.otp.mobile}" will work.