Forum Discussion

Joseph_Johnson_'s avatar
Joseph_Johnson_
Icon for Nimbostratus rankNimbostratus

One other thing to note, I am using host files on my local PC to test SSO since it is not in production. Is there a chance the F5 is using dns server when doing checks for the sso URI in the health monitor. The current ADFS in place is 2.0, the new config which i am testing is 3.0.

 

mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Mar 05, 2015
A good first troubleshooting step is to run the monitor's curl command from the BIG-IP command line and see what response you are getting from the server, for example: curl-apd -k -v --resolve sso.mysite.com:443:192.168.1.100 https://sso.mysite.com/adfs/ls/idpinitiatedsignon.htm AFAIK, the curl --resolve command bypasses the boxes DNS and local hosts file. You could try adding a host entry to BIG-IP, just in case.