Forum Discussion
Here's an idea...
The user's phone does all of the above as far as authentication goes.
Once it passes, the APM populates a variable indicating the check passed. After that I call an iRule event in the VPE disabling APM (via ACCESS::disable) and pass the connection to the pool assigned to the VS. I don't know if this is even possible (will the variable stick? will the apm actually then pass the connection back to the vs?), but let's assume it is.
I'm guessing at that point, I would need another iRule to validate the variable populated above as "passed", dynamically select the pool required (depending on what server the app needs to connect to), and also have the logic to rewrite the HTTP header (remove the part of the URI that controls the pool decision since the back-end doesn't need it, and possibly host header issues).
https://f5-apm-server.net/server_control_decision_in_uri/index.html?options=x
This would be a hack job and a half I suppose LOL - but I guess it's something I can test in the meantime.