Form SSO profiles

To enable and configure forms-based SSO, you first create an SSO profile.

Note

• Forms-based single sign-on does not work if the form is customized to include Javascript.
• In this feature, the terms “profile” and “action” mean the same thing.

To create a form SSO profile by using the command line interface

At the command prompt, type:

• add tm formSSOAction -actionURL -userField -passwdField -ssoSuccessRule [-nameValuePair ] [-responsesize ][-nvtype ( STATIC | DYNAMIC )][-submitMethod ( GET | POST )]
• show tm formSSOAction []

Example

add tm formSSOAction SSO-Prof-1 -actionURL "/logon.php" -userField "loginID" -passwdField "passwd" -nameValuePair "loginID passwd" -responsesize "9096" -ssoSuccessRule "HTTP.RES.HEADER("Set-Cookie").CONTAINS("LogonID")" -nvtype STATIC -submitMethod GET –sessTimeout 10 -defaultAuthorizationAction ALLOW 

To modify a form SSO by using the command line interface

At the command prompt, type:

```set tm formSSOAction -actionURL -userField -passwdField -ssoSuccessRule [-nameValuePair ] [-responsesize ][-nvtype ( STATIC | DYNAMIC )][-submitMethod ( GET | POST )]

### Example

set tm formSSOAction SSO-Prof-1 -actionURL “/logon.php” -userField “loginID” -passwdField “passwd” -ssoSuccessRule “HTTP.RES.HEADER(“Set-Cookie”).CONTAINS(“LogonID”)” -nameValuePair “loginID passwd” -responsesize “9096” -nvtype STATIC -submitMethod GET –sessTimeout 10 -defaultAuthorizationAction ALLOW

## To remove a form SSO profile by using the command line interface At the command prompt, type: ```rm tm formSSOAction 

Example

rm tm sessionAction SSO-Prof-1 

To configure form SSO profiles by using the configuration utility

1. Navigate toSecurity > AAA - Application Traffic > Policies > Traffic.
2. In the details pane, click theForm SSO Profilestab.
3. On the Form SSO Profiles tab, do one of the following:
   • To create a new form SSO profile, clickAdd.
   • To modify an existing form SSO profile, select the profile, and then click Edit.
4. In theCreate Form SSO ProfileorConfigure Form SSO Profile对话框中,指定参数的值:
   • Name*—name (Cannot be changed for a previously configured session action.)
   • 动作URL * -actionURL
   • User Name Field*—userField
   • Password Field*—passField
   • Expression*—ssoSuccessRule
   • Name Value Pair—nameValuePair
   • Response Size—responsesize
   • Extraction—nvtype
   • Submit Method—submitMethod
5. ClickCreateorOK, and then clickClose. The form SSO profile that you created appears in theTraffic Policies,Profiles, andForm SSO Profilespane.