Fortinet black logo

CLI Reference

waf site-publish-helper form-based-delegation

waf site-publish-helper form-based-delegation

Use this command to create a Form Based Delegation rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.

Syntax

config waf site-publish-helper form-based-delegation

edit waf site-publish-helper form-based-delegation

set url-type { plain | regular}

set logon-url <URL>

set form-action <URL>

set additional-cookies

set username-field

set password-field

set waf site-publish-helper form-based-delegation

next

end

Variable Description Default
form-based-delegation_name Enter a name for the Form based Delegation rule. No default.
url-type { plain | regular} plain—Enter a literal URL, such as /folder1/index.htm that the HTTP request must contain in order to match the rule, or use wildcards to match multiple URLs, such as /folder1/* or /folder1/*/index.htm. The URL must begin with a slash ( / ).

regular—A regular expression, such as ^/*.php, matching the URLs to which the rule should apply. The pattern does not require a slash ( / ).

plain
logon-url <URL> Enter the logon URL in simple string or regular expression. No default.
form-action <URL> The URL of the form. No default.
method { PUT | GET} Select whether to use GET or POST method to initiate the authentication requests to the server. POST
additional-cookies Configure to add cookie in the authentication request. disable

username-field

The keyword of the username field.

No default.

password-field

The keyword of the password field.

No default.

additional-field-list

Enter additional fields to add in the authentication request.

field-entry: field content
The format must be “key=value”

No default.

To use the Form Based Delegation, you need to create a Site Publish rule, select HTML Form Authentication for Client Authentication Method, select Form Based Delegation for Authentication Delegation, then choose the Form Based Delegation you have created. See waf site-publish-helper rule.

waf site-publish-helper form-based-delegation

Use this command to create a Form Based Delegation rule.

To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.

Syntax

config waf site-publish-helper form-based-delegation

edit waf site-publish-helper form-based-delegation

set url-type { plain | regular}

set logon-url <URL>

set form-action <URL>

set additional-cookies

set username-field

set password-field

set waf site-publish-helper form-based-delegation

next

end

Variable Description Default
form-based-delegation_name Enter a name for the Form based Delegation rule. No default.
url-type { plain | regular} plain—Enter a literal URL, such as /folder1/index.htm that the HTTP request must contain in order to match the rule, or use wildcards to match multiple URLs, such as /folder1/* or /folder1/*/index.htm. The URL must begin with a slash ( / ).

regular—A regular expression, such as ^/*.php, matching the URLs to which the rule should apply. The pattern does not require a slash ( / ).

plain
logon-url <URL> Enter the logon URL in simple string or regular expression. No default.
form-action <URL> The URL of the form. No default.
method { PUT | GET} Select whether to use GET or POST method to initiate the authentication requests to the server. POST
additional-cookies Configure to add cookie in the authentication request. disable

username-field

The keyword of the username field.

No default.

password-field

The keyword of the password field.

No default.

additional-field-list

Enter additional fields to add in the authentication request.

field-entry: field content
The format must be “key=value”

No default.

To use the Form Based Delegation, you need to create a Site Publish rule, select HTML Form Authentication for Client Authentication Method, select Form Based Delegation for Authentication Delegation, then choose the Form Based Delegation you have created. See waf site-publish-helper rule.