06-Apr-2022 10:32
Hi team, How to use with Microsoft authenticator? ls let me know or point me in the right direction.
13-Apr-2022 01:27
Hello Sakkarin_Westco.
Microsoft Authenticator is Time-based OTP that is equivalent to Google Authenticator.
There are some examples of how to use F5 with Google Authenticator.
https://clouddocs.f5.com/training/community/iam/html/archived/class9/module5/lab1.html
13-Apr-2022 04:26
Can you share the irule for generate ga code and ga code_verify ?
13-Apr-2022 04:51
For example:
Btw, if this response suits you, please don't forget to give some thumbs up or mark the response as "resolved" to let other people to find it.
18-Apr-2022 08:57
Dear Dario_Garrido
Is this irule for generate_ga_code ?
18-Apr-2022 12:14
No mate, this iRule is for GA verifying.
Take into account that there are several steps involved on using Time-based OTP.
In a production enviroment, F5 should only be doing the third step.
In my lab, I have the user key generated already stored in my A/D.
If my user wants to figure out what the key they have is, then uses a APM policy which captures the user key (LDAP query) and redirects this info to a PHP QR-code generator. Base on this syntax:
https://github.com/google/google-authenticator/wiki/Key-Uri-Format
This is my PHP QR-Code generator
https://github.com/edent/QR-Generator-PHP
After my user has the TOTP key already installed in their device, this previous iRule enters into play.
To be more precise, I'm using this API REST iRule to verify if the validation was passed.
https://community.f5.com/t5/crowdsrc/apm-google-authenticator-http-api/ta-p/287952
18-Apr-2022 12:18
BTW, with "generate_ga_code" I think you mean this iRule.
But never tested, I recommend you to work in the approach I mentioned previously.
19-Apr-2022 11:07
I've just written this article talking about TOTP and maybe could be helpful in your case.
https://community.f5.com/t5/crowdsrc/demystifying-time-based-otp/ta-p/294658