AnsweredAssumed Answered

IWA Fail over to Form login without active X

Question asked by rhibo02 Employee on Jan 19, 2017
Latest reply on Dec 11, 2018 by V.S.P

There is IWA failover to form login fail over sample file in community site. It is using active X. So it is not working other browser except IE. Here is JSP based IWA failover to form login. It is working fine in Chrome browser and Firefox browser. It is field developed module and it cannot be supported by CA officially. 


Similar code is used one of customers in their production environment. Feel free to change it and use it. If you find any issue, please let me know that.


Here is tested environment.


Solution Pro demo 1.7 

  • Policy server R12.52 SP2 on windows 2008R2.
  • Active Directory 2008 R2.
  • Secure Proxy Server R12.52 sp2 on windows 2008 R2.


The flow is the same as in 


  1. User access to protected web page 
  2. redirect IWA_FAILOVER_FORM login page
  3. Validate windows domain login,
    1. if yes, goes to windows authentication.
    2. Otherwise, it redirects to form protected page.


I have attached source code, CA SSO configuration and test screen shoot.