Forum Discussion

Francisco_Abel_'s avatar
Francisco_Abel_
Icon for Nimbostratus rankNimbostratus
Dec 31, 2014

SSO Form Post including additional dynamic parameter value (hidden)

Hi all,

 

Is it possible to implement a dynamic parameter inside an SSO Form POST configuration in F5 APM?

 

The tasks to be implemented:

 

  • Because one of the hidden parameter value is dynamic (associated with a session ID which is different for every access), we need to read the value from the login page which would be presented to the user (login form). I suppose this is possible by implementing an iRule and parsing the server response on the right URL response
  • After that, it would be necessary to save this value in a session variable. Again, I think this is possible wihtin the same iRule.
  • Finally, we would need to specify that variable as the required value for the additional FORM Post parameter/values, inside the SSO Form POST APM configuration or
  • To implement the SSO Form POST manually by means of another iRule, maybe using the other SSO Form post Client initiated and intercepting the automatic JS hidden Form POST an then, changing the content before sending to the server, by filling the additional param from the session variable

Anyone can please indicate if it's possible and the best way to do it in APM?

 

Thanks in advance,

 

PD

 

Example of a real POST Form containing a dynamic param (of course, apart from "username" and "password"):

 

  • Dynamic hidden param => javax.faces.ViewState " inputUserName=USERNAME&inputPassword=PASSWORD&submitButton=Sign+In&SignInForm_SUBMIT=1&javax.faces.ViewState=f33Cenm3zKZSHK7tFE6LfyVrJOJGJyYE8tKeefB4D21JFzYqbBfv42SZjL8IlTe62EW%2FPKo%2BdiuRBhv1ghTdus9D%2BQuFo1aR8YvNzu08NSx8GsVaMqf8evVSzy3YtDFr

3 Replies

  • Hi Eric, thank you for your suggestion. I will try the possibilities of the client initiated form post.

     

    KR, Francisco

     

  • Hi again,

     

    After trying the client-initiated Form method if works OK. The key is to not define the dynamic form parameter inside the "Form Paramters" APM configuration window. This allows the normal browser behaviour by automatically filling the hidden values. I have verified the JS from F5 only modifies the defined parameters (makes sense). The trick of "pivoting" the SSO action thru the user's browser is really good for this case.

     

    Thanks a lot, Francisco