Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
May 06, 2016

Call External Webservice for second factor authentication

Hello

 

We want to define an APM profile with two factor authentication. First of all, there would be an AD Authentication. After that, the APM would call an external webservice passing the username and session ID as parameters. The webservice responds with a token. Then, the APM shows a second logon page asking the user to provide the token, so that the APM can check that both tokens match.

 

We're trying to call the webservice with an iRule. Is is possible to call a webservice with SSL from an iRule?

 

APM
application delivery
iRules

2 Replies

Sort By
  • Arie's avatar
    Arie
    Icon for Altostratus rankAltostratus
    May 06, 2016

    If the token is provided based on the user's credentials the process you describe doesn't seem to meet the requirements for two-factor authentication as you'd be using the same factor twice.

     

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    May 11, 2016

    I would think this would be possible with an iRule and Sideband connections. Have you made any further progress on this issue?

     

    Maybe you could use HTTP Auth and use that to send the HTTP request to the OTP??

     

    -Seth