For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Paul_Duan_24199's avatar
Paul_Duan_24199
Icon for Nimbostratus rankNimbostratus
Jan 05, 2016
Solved

Access VMware Workspace Portal/Identity Manager using BIG-IP Access Policy Manager (APM)

The external users would like to access VMware Workspace Portal/Identity Manager through APM, so external users are able to launch Horizon View desktops or RDS farm applications presented on Workspac...
application delivery
BIG-IP Access Policy Manager (APM)
iApps
  • Justin_Venezia_'s avatar
    Justin_Venezia_
    Jan 06, 2016

    Hi, Paul.

     

    Yes - we can do this today with iRules to make this work. Right now, we have it working for PCoIP, Citrix, and Web Applications launched through IDM (they can be proxied through APM). We are working on the HTML apps and/or desktops right now, and "hopefully" should have this done soon.

     

    If you are interested, send me your contact information and we may be able to give you early access to the iRules...

     

    Justin Venezia

     

JC_47645's avatar
JC_47645
Icon for Nimbostratus rankNimbostratus
Nov 13, 2017

Have these iRules been published anywhere or is there a guide on how to set this up yet? If so, could someone please send a link or instructions. Thanks!

 

  • Matt_Mabis_2949's avatar
    Matt_Mabis_2949
    Historic F5 Account
    Nov 13, 2017

    Which method are you hoping to do @JC

     

    APM as IDP or VIDM as IDP?

     

    i am working on some documentation for the APM as IDP method with Native Client. Nothing public as of yet but i will post about it as soon as its ready, This would be using native 13.0 code and no iRules to implement the APM as IDP for Horizon Native Client integration.

     

  • JC_47645's avatar
    JC_47645
    Icon for Nimbostratus rankNimbostratus
    Nov 13, 2017

    I'm not exactly sure what the best setup for us is yet. I'm working on a POC with vIDM on-prem and integrating it with Horizon View/RDSH Apps. We already proxy View connections via APM for external access and everything works as expected. With the vIDM integration, accessing View internally works great but externally it appears the APM auth gets in the way. I've read the guide on how integrate APM (as SP) and vIDM (as IdP) so we can translate SAML to kerberos or header-based credentials for SSO access to internal apps. I was hoping there was something similar you could do for View connections but maybe had to incorporate some iRules to handle the auth request coming from the View Native Client.

     

    To make a long story short...just looking for some guidance on how to access View Desktops/Apps externally via vIDM when View is being proxied by APM. Any assistance or design recommendations would be appreciated.