One of my Company Vendor application want to call My web service and want to authenticate the traffic in APM . How can i authenticate

Question

One of My Vendor wants to call my web service in their application. No Manual interaction is involved . I provide them a personal certificate and service account with password. Now I want to authenticate the traffic coming from my vendors application and pass it to my web service . I am running 11.6 , so no oauth is possible . How can I authenticate the traffic in this situation. 
any help will be highly appreciated . &nbsp;

abdessamad1 · Answer

is this an API call?&nbsp;
yon can configure your client ssl profile to require client certificate and use clientless mode with an APM policy to validate the username/password provided.&nbsp;
Some examples and references here:&nbsp;
https://devcentral.f5.com/codeshare/apm-clientless-certificate-authentication-1108&nbsp;
https://devcentral.f5.com/questions/apm-clientless-mode-2-and-3-54908&nbsp;
https://devcentral.f5.com/questions/apm-clientless-mode&nbsp;
APM Operations Guide&nbsp;

yann_desmarest · Answer

Hi,&nbsp;
As said you can configure :&nbsp;
client certificate authenticationBasic authentication ( via Authorization header)XML or JSON based authentication by collecting content in request, parsing it, extracting username/password fields and then using ACCESS::policy evaluate command to run a APM policy and validate AD creds for example
Yann&nbsp;

yann_desmarest_ · Answer

Hi,&nbsp;
As said you can configure :&nbsp;
client certificate authenticationBasic authentication ( via Authorization header)XML or JSON based authentication by collecting content in request, parsing it, extracting username/password fields and then using ACCESS::policy evaluate command to run a APM policy and validate AD creds for example
Yann&nbsp;

yann_desmarest · Answer

here id a code share example for XML based authentication : https://devcentral.f5.com/codeshare/form-based-authentication-with-external-soap-web-services-910&nbsp;

yann_desmarest_ · Answer

here id a code share example for XML based authentication : https://devcentral.f5.com/s/articles/form-based-authentication-with-external-soap-web-services-910¬†

Forum Discussion

One of my Company Vendor application want to call My web service and want to authenticate the traffic in APM . How can i authenticate

5 Replies

Recent Discussions

vulnerabilities-CVE-2020-16150 & CVE-2013-0169

google autenticator broken barcode

Error while running ansible

ASM instance creation

[ASM] - what is "Browser Challange file" ?

Related Content

AD Authentication using multiple user attributes

Use x-forwarded-for to bypass authentication?

Selective mutual authentication by HTTP::Host

APM authentication for Exchange 2010

Authentication via Azure AD blocked by Access policy