Below I've posted my complete code and it works in our environment. One thing I did have to do was EXPLICITLY use the whitelst configuration option, as it did fail even if i host_whitelist_enabled=false.
So ensure the below options under your GAX application which is fronting Pulse, set the following in GA/GAX/CME:
[security]
host_whitelist_enabled=true
host_whitelist=
pulse.server.cba {Update for your FQDN}HTML Code below, update for your environment where bold:
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8"/>
<title>GAX Pulse Login Test</title>
</head>
<body>
<form id="logon" action="https://
pulse.server.cba/gax/api/session/login" method="post">
<p><input type="hidden" name="username" value="
pulse_username"></p>
<p><input type="hidden" name="password" value="
pulse_password"></p>
<input type="hidden" name="login_success_url" value="https://
pulse.server.cba/gax/?#/!/view:pulse.dashboard">
<input type="hidden" name="logout_url" value="https://
pulse.server.cba/gax/">
<p><input type="submit" value="Login" style="display: none;"></p>
</form>
<script type="text/javascript">
window.onload=function(){
var counter = 5;
var interval = setInterval(function() {
document.getElementById('txt').innerHTML = "<h2>You will be logged in to Pulse in " + counter + " seconds. </h2>";
counter--;
if (counter == 0) {
redirect();
clearInterval(interval);
}
}, 1000);
};
function redirect() {
document.getElementById("logon").submit();
}
</script>
<div id="txt"></div>
</body>
</html>