Forum Discussion

boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 17, 2013

APM two factor authentication with one password field

I am wondering if it is possible to do two factor authentication (RSA + AD) based on HTTP authentication, so with only a username and password field available, so no third field. i was wondering about adding the RSA code to the password, splitting them up in APM policy manager (perhaps based on a specific seperator symbol) and sending the RSA code to the correct location and the same for the AD username password.

 

anyone ever build something like that?

 

APM
remote access
security

2 Replies

Sort By
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Apr 17, 2013
    Yes, you most certainly can do that. Keep in mind that currently all APM Auth functions assume/require that the value fo the password is set to session.logon.last.password variable. So, use iRules or Variable Assignment VPE action to save off original password, then extract token value, assign it to session.logon.last.password variable, run it through RSA Auth, then after successful RSA Auth set the AD password's value of the original field to session.logon.last.password, and run through AD Auth action.
  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Apr 17, 2013
    thank you, that sounds promising.

     

     

    now i am just wondering if i can pickup the credentials provided after the HTTP auth request from a backend server instead of having to use the Logon Page action?