Forum Discussion

Mike_174431's avatar
Mike_174431
Icon for Nimbostratus rankNimbostratus
Oct 17, 2014

How to pass credentials via scripts

Hello,

 

We recently rolled out f5 APM in front of our public facing websites. We have several clients that use bots or scripts (.NET c code, actually) to "web scrape" data from our HTML pages.

 

Is there a way to set-up APM so that they can pass credentials with their requests and have them authenticated, without having to be presented a manual login page?

 

Thanks -Mike

 

APM
management
security

2 Replies

Sort By
  • Stewart's avatar
    Stewart
    Icon for Altostratus rankAltostratus
    Oct 17, 2014

    Hi Mike,

     

    You don't have to have a login page to use APM.

     

    One idea would be to use a client certificate check when your clients access your public facing websites. If they have a client certificate, that you issue, they get through and can scrape away.

     

    Stewart.

     

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Oct 18, 2014

    Yes you can from 11.4. You can use an irule to create a Access Session based on uri or something else. You can retrieve the credential in the header for instance and create the session. Irule commands are ACCESS::session create and ACCESS::policy evaluate.