Forum Discussion

dromero's avatar
dromero
Icon for Nimbostratus rankNimbostratus
Mar 27, 2020

2FA and SSO

Hi,

 

I have configured one-time password using an external SMS. It is working well. In addition, I have configured SSO for RDP Desktop. It is also working well. However, when OTP and SSO is enabled in the same branch. SSO is not working.

 

I think, there is something wrong with the password variable session.logon.last.password. There are two Login Page boxes. The first one for login credentials and the second one in the OTP Macro. Both uses the same variable session.logon.last.password. However, if I change the variable in the Login Page OTP for a new one, for instance session.logon.last.otp, the OTP Verify doesn't work.

 

How can I configure OTP and SSO in the same branch?

 

This is the KB I have used: https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-access-policy-manager-authentication-methods-14-1-0/one-time-password-authentication.html#GUID-7EFD0E56-5059-44B2-8978-AB4373A5CF22

 

Thanks, best regards.