IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Form based sso

    Posted Mon February 27, 2023 03:57 AM

    Hello Everyone,

    I'd like some help to configure Forms Based Single Sign-on on my application.

    I created the fsso.conf with the parameters:

    [forms-sso-login-pages]
    login-page-stanza = sgso
    login-credential-learning = yes

    [sgso]
    login-page = /TestSecApp/login*
    login-form-response-pattern = *
    login-form-action = j_security_check
    default-login-form-action = j_security_check
    gso-resource = sgso
    argument-stanza = args-for-sgso
    login-success-pattern = -200 +302

    [args-for-sgso]
    j_username = gso:username
    j_password = gso:password
    AM_username = cred:AZN_CRED_PRINCIPAL_NAME
    Special_Attribute = cred:tagvalue_custom_attribute

    My application has this source code (login page):

    <html>
      <head>
      <link rel="stylesheet" href="style1.css" type="text/css" media="all">
        <title>Security WebApp login page</title>
      </head>
      <body bgcolor="white"> 
      <div id="login">
      <blockquote>
      
      <h2>Please enter your user name and password:</h2>
      <p>
      <form method="POST" action="j_security_check">
        <div id="box1">  
          
          <p>Username:<input id="textbox1"  type="text" name="j_username"> </p>
          <p>Password:<td><input id="textbox1" type="password" name="j_password"> </p>
          <br>
          <input id="button1" type=submit value="Submit">
        </div>
      </form>
      </blockquote>
      </div>
      </body>
    </html>

    However, the SSO is not yet operational. What am I doing incorrectly?

    According to my understanding, we must additionally include the headers in the form so that the credentials are passed through the headers and we are directed to the login page.
    Please advise me on how to pass credentials through the header and if there is another technique for passing credentials to the login form.

    Below attached is the login page:

    Regards,

    Siddhant



    ------------------------------
    Siddhant Ghosalkar
    ------------------------------


  • 2.  RE: Form based sso

    Posted Tue February 28, 2023 04:51 AM

    Hi Siddhant,

    The URL shown in your screenshot does not match what is configured in you fsso file (/TestSecApp/login*). So it should be normal that the form login is not applied.

    Kind regards,

    Laurent



    ------------------------------
    Laurent LA Asselborn
    ------------------------------



  • 3.  RE: Form based sso

    Posted Mon March 06, 2023 07:08 AM

    hello Laurent,

    As per your suggestion, I have put the whole URL in the form, as it is in the form-based conf file. But when I tried it after clicking on the "deploy changes" tab and restarting the reverse proxy, it deleted my junction from the reverse proxy. Can you guide me on how can I put the login page path in the conf file? 

     



    ------------------------------
    Siddhant Ghosalkar
    ------------------------------