Bug ID 1026961: OTP Verify missing UI parameters when using with PRP

Last Modified: Oct 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:,

Opened: Jun 17, 2021

Severity: 3-Major


When using "OTP Verify" agent with Per Request Policies, OTP Source and Max Logon Attempts session variables cannot be configured using the UI.


If the configured logon page where users enter their OTP is configured to capture this token with anything different from a "password" session variable name, OTP Verify will fail.


Using "OTP Verify" agent with Per Request Policy


Manually edit bigip.conf from: apm policy agent otp-verify /Common/otpsub_act_otp_verify_subsession_ag { } To this new config: apm policy agent otp-verify /Common/otpsub_act_otp_verify_subsession_ag { otp-source "%{subsession.logon.last.otp}" } Where opt-source variable name matches what was set on the logon page.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips