Manual Chapter :
Adding a Variable Assign agent to collect the username in an OAuth
MFA subroutine
Applies To:
Show Versions
BIG-IP APM
- 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0
Adding a Variable Assign agent to collect the username in an OAuth
MFA subroutine
You should have a per-request policy, and SAML
authentication servers for authentication with and without MFA.
Create the subroutines to allow continuous
checks and reauthenticate with RADIUS and MFA when the user goes to a specific
URL.
- From the Main tab, click .
- Find the policy you want to edit, and in the Per-Request Policy column, clickEdit.
- In the per-request policy, clickAdd New Subroutine.
- Name the subroutine for use with OAuth and MFA. For example,radius_mfa_okta.
- ClickSave.
- Expand the subroutine, and click the plus to add a new item.
- Click theAssignmenttab, selectVariable Assign, and clickAdd Item.
- ClickAdd new entry.
- On the left, selectCustom Variableand typesubsession.logon.last.username.
- On the right, selectSession Variableand typelast.subsession.logon.last.logonname.
- ClickFinished.
Configure the
remaining items for the subroutine.
