For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Oct 28, 2015

ADFS configuration with APM fails when SAM and UPN are NOT identically

Hi guys,   just if somebody has an idea about this. We have a customer who is using an adfs setup together with apm. For older users upn and sam account name are not the same, for newer users they...
BIG-IP Access Policy Manager (APM)
design
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 28, 2015

Hi,

you are talking about ADFS but there is no ADFS authentication... I think this is a LDAP authentication...

in your configuration, the logon page may strip domain from username.

can you check variables session.logon.last.username and session.logon.last.logonname values?

try to change LDAP auth filter to:

(|(sAMAccountName=%{session.logon.last.username})(UserPrincipalName=%{session.logon.last.logonname}))