For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Oct 28, 2015

ADFS configuration with APM fails when SAM and UPN are NOT identically

Hi guys,   just if somebody has an idea about this. We have a customer who is using an adfs setup together with apm. For older users upn and sam account name are not the same, for newer users they...
BIG-IP Access Policy Manager (APM)
design
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 30, 2015

So the ADFS server is behind the APM virtual server.

 

after the LDAP auth with filter I provided, create a LDAP query to get the samaccountname attribute.

 

then change SSO credential mapping username to retrieve username from session.ldap.last.attr.SAMAccountName instead of logon page username.