OAM Customized form in IIS 7 with passthrough = yes

Question

Hi all,
Currently I have to create a customized form for OAM in IIS7. Due to specific requirement, user after authenticated will be redirected to another ASP page for post-login handling, before he/she can be redirected back to original request. I'm quite struggling in how to configure the Authentication method and the form properly.
With my current setup, after authenticated, user can be redirected to the post-login ASP page. But all parameter pass from the form is lost. This is my configuration:
Authentication method in OAM:
Challenge Parameter:
action:/access/oblix/apps/webgate/bin/webgate.dll
creds:userid password
passthrough:yes
form:/login.asp
and this is my login form:
<form action="/access/oblix/apps/webgate/bin/webgate.dll?http://mydomain.com/header.asp" method="post">
Username: <input type="text" name="userid" />
Password: <input type="password" name="password" />
<input type="hidden" name="success_callback_url" value="http://mydomain.com/iisstart.htm"/>
<input type="submit" value="Submit" />
</form>
With this configuration, once user authenticated, he/she will be redirected to
/access/oblix/apps/webgate/bin/webgate.dll?http://mydomain.com/header.asp
and after that Firefox recognizes:
Failed to load source for: http://mydomain.com/access/oblix/apps/webgate/bin/webgate.dll?http://mydomain.com/header.asp
and redirect me back to
http://mydomain.com/header.asp
So once I reach http://mydomain.com/header.asp, all POST data has been lost (during redirection).
I wonder how can I configure it, so that http://mydomain.com/header.asp can have post data from the form
Thank you so much.
Harry
Edited by: user12216301 on Dec 17, 2009 11:02 PM

Answer 1

Hi Harry,
I am afraid webgate can not post the original form to the next page.
when you post a form to /access/../webgate.dll.. webgate consumes the form and does AuthN/AuthZ...
and it will not post the form to the next page.
I am not 100% sure, though I feel this is possible
create a custom AuthN/AuthZ plugin, here you can read your form parmeters.
based on the form parameters, you can decide what you want to do next, like redirecting to a success page or failure page.
- Sandeep