# SSO using JSON POST? **URL:** \ **Category:** Technical Forums\ **Tags:** big-ip-access-policy-manager-apm, application-delivery\ **Created:** [July 27, 2017, 8:32am UTC](https://community.f5.com/t/sso-using-json-post/27316 "2017-07-27T08:32:49Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![coriolis\_75734](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@coriolis\_75734](https://community.f5.com/u/coriolis_75734)\ **Post date:** [July 27, 2017, 8:32am UTC](https://community.f5.com/t/sso-using-json-post/27316/1 "2017-07-27T08:32:49Z")
Is it possible using APM to create a JSON payload containing the username/password to be used on particular start URIs? We have an app which requires this as the POST on the sign in page and i’m trying to SSO with the known user credentials. ---
**Author:** ![coriolis\_75734](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@coriolis\_75734](https://community.f5.com/u/coriolis_75734)\ **Post date:** [July 27, 2017, 8:40am UTC](https://community.f5.com/t/sso-using-json-post/27316/2 "2017-07-27T08:40:52Z")
further information: JSON: ```json {"parameters":[{"name":"CAMNamespace","value":"NamespaceName"},{"name":"h_CAM_action","value":"logonAs"},{"name":"CAMUsername","value":"USERNAME"},{"name":"CAMPassword","value":"PASSWORD"}]} ``` ---
**Author:** ![Josiah\_39459](https://avatars.discourse-cdn.com/v4/letter/j/9de053/32.png) [@Josiah\_39459](https://community.f5.com/u/Josiah_39459)\ **Post date:** [July 27, 2017, 4:07pm UTC](https://community.f5.com/t/sso-using-json-post/27316/3 "2017-07-27T16:07:43Z")
Does the app have a logon page? If there is a logon page then formsv2 should work in most instances. It works just like a user would logging into the page and automatically submitting the form. If the ONLY way to logon is posting JSON to a specific url (and there is no UI interface for it), you could still do that via a sideband irule. ---
**Author:** ![Yann\_Desmarest\_1](https://avatars.discourse-cdn.com/v4/letter/y/65b543/32.png) [@Yann\_Desmarest\_1](https://community.f5.com/u/Yann_Desmarest_1)\ **Post date:** [August 17, 2017, 9:59pm UTC](https://community.f5.com/t/sso-using-json-post/27316/4 "2017-08-17T21:59:21Z")
Hi, You can use an irule to build a POST request with JSON payload and send it using the sideband commands. You can also use an HTTP Authentication object (in AAA tab) and build your request headers and payload. HTTP Authentication can be triggered from within the VPE only. If you need to trigger the SSO after authentication process complete, you can only use an irule or iruleLX. Yann ---
**Author:** ![The-messenger](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/the-messenger/32/11689_2.png) [@The-messenger](https://community.f5.com/u/The-messenger)\ **Post date:** [August 20, 2018, 4:55pm UTC](https://community.f5.com/t/sso-using-json-post/27316/5 "2018-08-20T16:55:43Z")
Where can I find out more on this? I have apps with their own login page, one is mobile, I need to secure these with APM. I realize this isn’t a checkbox solution but where can I find info on how to do the steps in the process? There are several threads where someone is doing the same, with no answers. I’ve been working, trial and error with a mobile app, trying to capture the creds and submit to the mobile app server. There’s a lot of trial and error. Documentation on this process would be great. ---
**Author:** ![youssef1](https://avatars.discourse-cdn.com/v4/letter/y/ed655f/32.png) [@youssef1](https://community.f5.com/u/youssef1)\ **Post date:** [August 21, 2018, 9:32am UTC](https://community.f5.com/t/sso-using-json-post/27316/6 "2018-08-21T09:32:21Z")
Hi, As I mentioned Yann, the use of SIDEBAND is a good compromise for this kind of situation. in the past I already had to make irules to overcome this problem because basic SSO profiles did not meet my needs. and in some cases in addition to the SSO I had to replay some headers (CSRF). now I have gained some comfort for this kind of need so if you need help on the subject I can bring it to you (Try to built an irule). Keep me in touch. Regards ---
**Author:** ![The-messenger](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/the-messenger/32/11689_2.png) [@The-messenger](https://community.f5.com/u/The-messenger)\ **Post date:** [August 24, 2018, 1:43pm UTC](https://community.f5.com/t/sso-using-json-post/27316/7 "2018-08-24T13:43:20Z")
Josia, what is formsv2? ---
**Author:** ![Yann\_Desmarest\_1](https://avatars.discourse-cdn.com/v4/letter/y/65b543/32.png) [@Yann\_Desmarest\_1](https://community.f5.com/u/Yann_Desmarest_1)\ **Post date:** [August 24, 2018, 7:00pm UTC](https://community.f5.com/t/sso-using-json-post/27316/8 "2018-08-24T19:00:56Z")
Hi, Josiah may refer to Form Based SSO or Client Initiated Form Based SSO. Those are the only two options available for HTTP forms SSO. Traditional Forms SSO can fit if there is no dynamic hidden input in the form. Client Initiated Forms SSO help when Traditional Forms SSO won’t works. Hope it helps Yann ---
**Author:** ![schmuck](https://avatars.discourse-cdn.com/v4/letter/s/e95f7d/32.png) [@schmuck](https://community.f5.com/u/schmuck)\ **Post date:** [May 22, 2019, 8:46pm UTC](https://community.f5.com/t/sso-using-json-post/27316/9 "2019-05-22T20:46:30Z")
Hi  , Can you explain how you did this with the sideband rule? ---
**Author:** ![Abed\_AL-R](https://avatars.discourse-cdn.com/v4/letter/a/58956e/32.png) [@Abed\_AL-R](https://community.f5.com/u/Abed_AL-R)\ **Post date:** [January 19, 2020, 7:28am UTC](https://community.f5.com/t/sso-using-json-post/27316/10 "2020-01-19T07:28:59Z")
Hello guys I’m have a problem in the forum based which I think it is related to this topic Using APM v13.1, When I create a forum based for a web application configured in the portal access, I got this error message from the web application: ```markup {"Message":"The request entity's media type 'application/x-www-form-urlencoded' is not supported for this resource."} ``` ![0691T000005oW0cQAE.png](https://d20hrnpixdzcsd.cloudfront.net/original/2X/7/78005e8cefff7a8f239bed58dc415ff7dcfa7222.png) Does this mean I should customize the web application code to accept: **x-www-form-urlencoded** for the forum based to work ? Thanks ---
**Author:** ![Abhisar](https://avatars.discourse-cdn.com/v4/letter/a/da6949/32.png) [@Abhisar](https://community.f5.com/u/Abhisar)\ **Post date:** [July 14, 2022, 8:27am UTC](https://community.f5.com/t/sso-using-json-post/27316/11 "2022-07-14T08:27:10Z")
Hi I an facing same issue? You were able to fix? Can you share steps. thanks