NimbostratusF5 APM with OIDC Web Duo Prompt
DUO is retiring the iFrame support which has been working well for us. I am trying to implement the replacement found at https://duo.com/docs/f5bigip-web and APM Configuration to Support Duo MFA using iRule | DevCentral
This is our first JSON / OAuth implementation and I think I missed something in the setup
The DUO subroutine is implemented after the initial AD Authentication and Query
When I attempt to log on with the VPN client I get past the AD Authenticiaton but when the DUO challenge is to appear it fails and rolls back to the AD Authentication prompt screen.
The error I pulled out of the access report is
/Common/duosubroutine_act_oauth_client_ag: OAuth Client: authorization_code is required to get access_token for server '/Common/duo_server'
I am attempting to configure this as a per session policy. To my limited understanding I believe the secret is not being properly passed.
Could anyone provide steps for troubleshooting this?
Thank You
For those who may run into this in the future sometimes it can be difficult to distinguish a _ from a - in the article. Should you run into this check for
- client_id parameter with type client-id
- response_type parameter with type response-type
- grant_type parameter with type grant-type
- redirect_uri parameter with type redirect-uri
