Forum Discussion

SergeyWBC_36002's avatar
SergeyWBC_36002
Icon for Nimbostratus rankNimbostratus
Apr 30, 2018

APM VPN policy with a hiddent domain addition

Hello Users normally login with username@domain, which matches their UPN and also matches RSA username. Now that Office365 federation requires a UPN change, their UPN will be changed to a much longer domain name that they have to type every time they login. Is it possible to modify RSA logon page step in the policy so that they just type their username and F5 will add a domain name when it is passed to RSA for authentication? Like this: 1. User just types "username" and their PIN+Tokencode 2. F5 APM policy transforms the "username" to "username@somelongdomainname" and passes the new username and pin+tokencode to RSA

 

What is the best way to do it? Environment is complex and we cannot just change RSA usernames to a short name (we tried)

 

APM
devops
security

2 Replies

Sort By
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Apr 30, 2018

    you can use following variable assign

    session.logon.last.username = 

    expr { [set username [string tolower [mcget {session.logon.last.logonname}]]] contains "@" ? $username : "$username@domain.local" }
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 30, 2018

    Hello,

    Add a "Variable assign" and set it like that:

    Custom Variable:
    session.logon.last.username
Custom expression:
    expr { "[mcget {session.logon.last.username}]@mydomain.com" }

    Regards,