Walter_Kacynski
Nov 29, 2016Cirrostratus
BIG-IQ SSO
Has anyone done SSO with BIG-IQ and a BIG-IP APM deployment?
Has anyone done SSO with BIG-IQ and a BIG-IP APM deployment?
Just to clarify, are you wanting to use BIGIQ to configure SSO and push the config to an APM or are you wanting to have BIGIQ SSO you into the APM UI?
-Seth
I want to put the management GUI of BIG-IQ behind APM / SSO.
Hey Walter,
Here is what I have come up with so far...
Here is the SSO config that I applied to the Access Policy.
apm sso form-basedv2 /Common/BigIQ_SSO {
forms {
loginform {
controls {
passwd {
secure true
value "%{session.sso.token.last.password}"
}
username {
value "%{session.sso.token.last.username}"
}
}
request-value /ui/login/
submit-javascript ""
submit-javascript-type custom
}
}
}
You will also need to add the following variable assign in the VPE.
apm policy agent variable-assign /Common/portal_wizard_ap_act_variable_assign_ag {
variables {
{
expression "mcget -secure {session.logon.last.password}"
varname session.sso.token.custom.password
}
}
}
Let me know if this works for you.
-Seth