For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Oct 28, 2015

ADFS configuration with APM fails when SAM and UPN are NOT identically

Hi guys,   just if somebody has an idea about this. We have a customer who is using an adfs setup together with apm. For older users upn and sam account name are not the same, for newer users they...
BIG-IP Access Policy Manager (APM)
design
security
jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Oct 28, 2015

hello Stanislas,

 

thanks for the quick reply. It's a customer setup, we are just contacted to fix the issue. initial configuration was done by them according the deployment guide: https://www.f5.com/pdf/deployment-guides/microsoft-adfs-dg.pdf But it works for users who have the same SAM and UPN name, we don't use SAML auth in VPE so I find it very strange it's failing when SAM name is changed... VPE is very simple: logon page - LDAP auth with UserPrincipalName in the search field and afterwards SSO credential mapping...and it works perfectly (but unfortunately only for users who are recently created)