Shared Authentication Domains on BIG-IP APM

How to share an APM session across multiple access profiles. A common question for someone new to BIG-IP Access Policy Manager (APM) is how do I configure BIG-IP APM so the user only logs in once....
Published Feb 14, 2017
Version 1.0
aaa
BIG-IP
BIG-IP Access Policy Manager (APM)
security
SSO
Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Sep 09, 2022

Yes, in a per-session policy once you have a session in Allow state and have access to the MRHSession cookie, no further prompts will be performed.  The only way to address this would be to use a per-Request access policy on App3 to perform "step-up" authentication.