APM - Creation of IdP and SP for SAML

Hi,

maybe you should take one step at a time. Are you aware of the roles of IdP and SP in SAML?

There are two parties involved in the process of SAML authentication, an identity provider (IdP) and a service provider (SP). IdP and SP mutually trust each other.

The IdP performs the authentication (very often against some kind of User Directory like LDAP) and passes the user's identity (as well as information about the users role, authorization, an so on) in the form of a SAML authentication token, to the SP.

The SP processes the token and gives the user access to the service, very often some kind of SaaS.

Which role should your BIG-IP take? The role of the IdP or the SP, both?

KR

Daniel