Forum Discussion

jefp_185700's avatar
jefp_185700
Icon for Nimbostratus rankNimbostratus
Oct 28, 2015

ADFS configuration with APM fails when SAM and UPN are NOT identically

Hi guys,   just if somebody has an idea about this. We have a customer who is using an adfs setup together with apm. For older users upn and sam account name are not the same, for newer users they...
BIG-IP Access Policy Manager (APM)
design
security
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Oct 30, 2015

So the ADFS server is behind the APM virtual server.

 

after the LDAP auth with filter I provided, create a LDAP query to get the samaccountname attribute.

 

then change SSO credential mapping username to retrieve username from session.ldap.last.attr.SAMAccountName instead of logon page username.