Forum Discussion

BenN_NZ's avatar
BenN_NZ
Icon for Altostratus rankAltostratus
Jun 28, 2019

How to perform email OTP before authentication?

We are wanting to perform an email OTP verify prior to authenticating the user against AD.   I've got some way towards this by placing an OTP macro near the start of a flow (using an AD Query to ...
application delivery
BIG-IP Access Policy Manager (APM)
policy
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jun 28, 2019

Hi

 

Using the variable assign object, are you able to save the AD password after the initial login page into a different APM variable. Then, after the OTP auth has occurred, put another variable assign object in to rewrite the session.logon.last.password variable back to the original AD password value that you saved earlier.