19-Feb-2020 13:12
When using APM Forms SSO V2 (Client-Side JavaScript) I observe the the browser prompts to save the users password. However the password being submitted is the f5-sso-token marker that APM uses to perform password substitution as the request flows to the backend. This is obviously not the correct password that the browser should cache. Is there a way to indicate that this password should not be saved?
16-Nov-2021 08:58
Nope, this is still an issue.
16-Nov-2021 12:25
I created an Empty function after the login page, added a new branch with the filter "expr {[mcget -secure {session.logon.last.password}] == "f5-sso-token"}" and forwarded to a Message Box explaining the error, and how to update or delete the entry in the browsers, then forwarding to a Deny_Redirect back to the login page.
Dirty workaround, but prevents accounts being locked out and a few support calls.