F5 Sites
  • F5.com
  • F5 Labs
  • MyF5
  • NGINX
  • Partner Central
  • Education Services Portal (ESP)
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. CrowdSRC
  3. CodeShare

Support for POST preservation when APM Multidomain SSO is configured

Problem this snippet solves: F5 doesn't support the preservation of the initial POST request when the Virtual Server has an access profile configured for Multidomain SSO. After authentication, the u...
Published Oct 23, 2017
Version 1.0
BIG-IP Access Policy Manager (APM)
devops
iRules
multi domain
post preservation
security
SSO
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Joined September 11, 2012
View Profile
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 27, 2017

Hi,

 

Really nice work. I never saw How POST requests were handled for new session. you made this code have almost the same behavior as single domain SSO!

 

here are some code improvements:

 

add query string parameters (with or without query string parameters):

 

set uri [HTTP::path]?[join "[HTTP::query] ct=[URI::encode [HTTP::header Content-Type]] f5-mdsso-post=1" &]

In your http code to resubmit, you don't manage existing query string (the action is [HTTP::path]).

 

you can use the following action to remove your parameters :

 

set action [string trimrigth [getfield HTTP::uri "ct=" 1] ?&]

limit ACCESS::session usage :

 

change the first condition with :

 

if { ![set active_session [ACCESS::session exists [HTTP::cookie MRHSession]]]

then for next conditions:

 

  if { $active_session && ...

Help guide the future of your DevCentral Community!

What tools do you use to collaborate? (1min - anonymous)

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesTraining & Certification

SUPPORT

Manage SubscriptionsProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

©2026 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information