Updated Date: 07/07/2026
Configuring a post-login URL
You need to configure a post-login URL only if the login page sends the login request to a URL that is different from the login URL. (For example, the login page URL is /login.jsp, but it sends the user name and password to /validate.jsp).
Configure a post-login URL to ensure that the BIG-IP system can retrieve the user name and decrypt the password.
-
On the Main tab, click Security > Fraud Protection Service > Anti-Fraud Profiles.
The Anti-Fraud Profiles screen opens.
-
From the list of profiles, select the relevant profile.
The Anti-Fraud Profile Properties screen opens.
-
In the Anti-Fraud Configuration area, click URL List.
The URL List opens.
-
Select the check box next to the login URL.
-
Click the Clone button.
The Clone URL pop-up screen opens.
-
In the URL Path field, type the URL that is referred to in the form action of the HTTP request.
-
Optional: In the Description field, type a description for the URL.
-
If you don’t want any of the FPS detection features to run on the web page of the post-login URL, disable the Inject JavaScript setting.
-
If the login URL contains SPA views and you want the post-login URL to inherit those views, select the Enabled check box by Views.
-
Select the Enabled check box by Parameters.
-
If you have assigned Request Signatures to the login URL and you want the post-login URL to inherit them, select the Enabled check box by Request Signatures.
-
Click the Clone button in the Clone URL pop-up screen.
Note: Once the new URL is created, there is no further dependency on the source URL and any future changes made to the source URL are not inherited by the new URL.
The BIG-IP system creates the post-login URL.