Domain Cookie SSO
Hello All, I am trying to figure out why sso using a domain cookie is not working for just one of my applications. I am running 12.1.2 and have domain cookie working for other applications so not sure why this one is not cooperating. Current configuration I have a webtop (webtop.test.com) with application that is not allowing SSO at the moment (app1.test.com) Webtop.test.com Access policy that uses Logon page > AD Auth > SSO Credential Mapping > Advanced Resource assign Advanced resource assign has portal access, few SAML, webtop, and webtop links Access Policy is set to Global for Profile Scope SSO/Auth Domains has domain cookie test.com and Secure flag checked app1.test.com textapp1.test.com is a virtual server on the BIGIP access policy Logon page > AD Auth > SSO Credential Mapping Access Policy is set to Global for Profile Scope SSO/Auth Domains has domain cookie test.com and Secure flag checked Issue When I login to the webtop and click on the link to app1 I am getting prompted to login again via the app1 access policy login page. Troubleshooting I can see using sso tracer that the cookie that is created when logging in to webtop is not being used by app1 because it creates a new LastMRH Session id. I have tried to add persistent to sso/Auth domains I have another app app2 that is configured the same way but this one works as I would expect. If I login directly to app2 then open a new tab and go to app1 domain cookie is working as I am not prompted to login again. I have enabled debug on webtop and app1 but the apm log doesn't show anything useful for app1 since it doesn't login. I have tested on Chrome, Firefox, Edge and IE11 all have same issue for sso to app1 from webtop. Any ideas would be greatly appreciated. Thanks
Advanced Resource Assign Expression Failing
I have a logging agent right before the Advanced Resource Assign with session.custom.* The variable i am testing against is shown. I cannot get the right information to display. I tried ends_with "201" and tried contains "201" but the second one will NOT load and I have no idea why. I do not see those resources on the webtop. Common:bcb3012f: Logging Agent Common:bcb3012f: session.custom.rdp.destination is 172.30.7.119 Common:bcb3012f: session.custom.rdp.domain is WORKGROUP Common:bcb3012f: session.custom.rdp.password is ********** Common:bcb3012f: session.custom.rdp.username is a Common:bcb3012f: session.custom.version is 801-201blank webtop on citrix_xendesktop iapp
hi, everyone i have a somewhat annoying problem that occurs every now and then, mostly after a reboot of the bigip's. i have published a solution using the citrix_xenapp_xendesktop_2012_06_27, which works fine for most of the time. But there has been a few occasions now, mostly after a reboot, that users log in, an only find a blank wetop waiting for them, with no applications to choose from. The easy workaround is to simply reapply the access policy, but i would like to see if there is a more permanent solution to this. im running a HA pair of 4200's on version 11.5.2, with ltm+asm+apm modules liscensed.
Remote desktop resource not clickable on full webtop
I ran into an issue today with a user that once they logged into the full WebTop they were unable to click any of the RDP resources, or in other words it did nothing when they clicked on the link. I had the user try on another non-domain joined PC and still got the same result. Both PCs were running IE11, the site was listed in the trusted sites list of the browser, F5 add-ons were enabled and activeX settings were set to enable or prompt. We also tried to disable their anti-virus temporarily as a test and it yielded the same results as well. We are running 11.5.3 HF2, the apm logs show no errors or warnings for that user's session ID and no other users are having this issue. Any suggestions on what to try next?
full webtop using edge client
I am trying to establish an edge client session ending with a full webtop. From the IE browser, I am able to complete the session and establish a full webtop at the end. When I go through the edge client, I am able to establish a session; however, the webtop minimizes just as the connection is established. How can I establish an edge client session and keep the full webtop IE browser open and not minimize? Any help would be appreciated. Thanks.
How to add a tel: URI to a Webtop link?
I am trying to construct a list of web-top links that will be pointing outside the F5 so users can access key resources and contacts. When i try to add a URI of tel: it comes up saying this isn't possible and has to be http:// https:// e.t.c. Is there anyway around this, or are web links only valid?
