IControl REST Remote Authentication BIG-IP v12

active-directoryauthenticationf5-big-ip

I have an issue while trying to use remote authentication on iControl REST API.

I have tried to configure remote authentication using the following article Configuring Remote User Authentication and Authorization and have tried to make REST API calls using this article.

The following sentence was confusing for me:

"If you are using an external authentication provider, get the login reference from your system administrator.".

I'm not sure where can I get the login reference. When I try to create an authentication token without login reference it works but when I try to use the token from the response I get a 401 response.

I have also found a "workaround" on this site, and it sounds a little bit hacky too. I can't post a link to it, since I don't have 10 reputation points.

Can anyone confirm that the issue was fixed in v12 and has anyone tried using remote authentication with iControl REST API? If so, do you have any tips regarding the configuration and how to use it?

I have also asked the same question on f5 site but I haven't received an answer yet. I also forgot to mention that I can login to the device using web console and putty with external account.

Any help would be appreciated.

Thank you

Best Answer

URL: https://172.16.44.15/mgmt/shared/authn/login 
Method: POST
Headers: Content-Type: application/json
Payload: {
    "username": "remote_user_name", 
    "password": "remote_user_password", 
    "loginProviderName": "tmos"
    }

You will get a token that you will then place as the value in the X-F5-AUTH-TOKEN header.

Related Topic