Forum Discussion

SanjayP's avatar
SanjayP
Icon for Nacreous rankNacreous
Jan 29, 2015

APM header insert

IN HTTP basic method APM inserts "authorization header". WHat header are inserted by ntlm, kerbereos and saml method in serverside so that application can authorize the user??  
BIG-IP Access Policy Manager (APM)
security
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Jan 29, 2015

Not too familiar with the differences between NTLM and Kerberos, but this site gives some good NTLM information. It uses the 

WWW-Authenticate
and 
Authorization
headers for negotiation. Someone else may have to speak to Kerberos headers, as I have no experience with Kerberos.

For SAML, you may want to check out the wiki for 1.1 and the wiki for 2.0. SAML uses assertions as part of the body, and I don't think they really use specific headers for anything.