Forum Discussion

cjmalon_145830's avatar
cjmalon_145830
Icon for Nimbostratus rankNimbostratus
Dec 24, 2014

APM Passing Static username and password

Hi, I am new to F5 and want to do the following,

 

I have a bunch of devices on the network running webservers that can't use centralised authentication, I would like to provide a webtop with Portal Resource links to these Webservers and have APM pass a static username/password to the Portal Resources Webserver after the Portal Link is launched. I tried setting the static username and password in the Username Source and Password Source fields in the SSO configuration and then applying the SSO configuration to the Portal Resource Item with no success. I assume that for the username source and password source you just cant use the username and password you have to use a SSO session variable that you collect earlier? I have seen that you can pass the username and password in a variable and then have this populate the SSO Credential mapping unfortunately I cant see how this would work if the portal webserver resources have different username and passwords, can I use an Irule for this and if so can someone provide me an example irule.

 

Thankyou Cameron

 

8 Replies

  • Did you try the variable assign action to map the username and password into these SSO fields?

     

  • Hi Walter, Yes this is possible when you are only using a single username/password pair for all static password portal resources on the webtop, However what I want to know is how do you do this when your webtop has multiple portal resources with different static useranme/password pairs seems the variable assign of static username/password is only useful if all resources on the page have the same username/password pair.

     

    "I have seen that you can pass the username and password in a variable and then have this populate the SSO Credential mapping unfortunately I cant see how this would work if the portal webserver resources have different username and passwords"

     

  • you can define a different SSO profile per webtop resource. so in that way you can send different SSO values.

     

  • OK do custom variables for username and password and then reference them in the SSO config, I see why when I had done this before it didnt work it was because my password text contained the @ symbol and when I saved this as a custom variable it was automatically modified to return {password} due to the @ in the password string.

     

    Thanks for your help Guys.

     

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      if this works out for please flag the question as answered.
  • How did you handle password masking or encryption so they aren't stored as clear text in bigip.conf ?

     

  • Hi,

     

    I have same problem, password is going to portal acces with secure. How can i correct it. For example password is "admin" but when its go to portal acces it is "$CK$FkJZSanL$VkCKc3hwKy+o90VvtSTWbU4i4Umoxg1NI3W3ejMRiS0="

     

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP

      a new question will probably get you a better answer, specially on a question 4 years old. also provide somee extra details, like where you see that question, i don't quite get what you ask now.