Forum Discussion

Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Feb 19, 2020

APM Forms SSO V2 disable password save prompt

When using APM Forms SSO V2 (Client-Side JavaScript) I observe the the browser prompts to save the users password. However the password being submitted is the f5-sso-token marker that APM uses to perform password substitution as the request flows to the backend. This is obviously not the correct password that the browser should cache. Is there a way to indicate that this password should not be saved?

4 Replies

  • Sgbjrn's avatar
    Sgbjrn
    Icon for Nimbostratus rankNimbostratus

    Did you find a solution to this issue?

     

    We ran into the same issue.

  • Sgbjrn's avatar
    Sgbjrn
    Icon for Nimbostratus rankNimbostratus

    I created an Empty function after the login page, added a new branch with the filter "expr {[mcget -secure {session.logon.last.password}] == "f5-sso-token"}" and forwarded to a Message Box explaining the error, and how to update or delete the entry in the browsers, then forwarding to a Deny_Redirect back to the login page.

     

    Dirty workaround, but prevents accounts being locked out and a few support calls.

  • Sgbjrn's avatar
    Sgbjrn
    Icon for Nimbostratus rankNimbostratus

    As a side note, I didn't manage to reproduce the issue in Firefox. So it seems like a bug with chromium browsers. (Edge/Chrome tested)