Use the email address registered in Active Directory for F5 BIG IP APM OTP authentication

Hello Keigo.

Which DB do you expect to find your email address?

​

Usually, people stores email and phone information in the AD and APM can get both using a LDAP query.

​

VPE policy should look like this:

- LDAP query to get email

- Generate OTP code

- Send an email with the previous code

- Use a logon page to ask for that code

- Verify the code

​

Regards,

Dario.