Forum Discussion
APM - IdP endpoint not working, returns a 404
I want to connect BIG-IP APM with simpleSAMLphp SP. I followed this guide but when the SP sent the SAML AuthNRequest to the APM IdP, it shows a 404 error.
This is how my environment is configured (notice that ip and hostnames here are not real, but has the same look like that originals):
- Partion: Common
- hostname: f5.example.com
- IP Address: 10.4.12.133 (not real)
I created a Virtual Address 10.4.12.134
I created a Virtual Server named testsaml:
- Source Address: 0.0.0.0/0
- Destination Address: 10.4.12.134
- Service Port: 443 / HTTPS
- State: Enable
- SSL Profile (Client): Common/clientssl
- SSL Profile (Server): Common/clientssl
And using an Access Profile test:
- Partition / Path: Common
- Parent Profile: access
- Profile Type:All
- SSO Domain: Single Domain
- SSO COnfiguration: testsaml
And has an IdP: testsaml with the following data:
- IdP EntityID: https://f5.example.com/testsaml
- Artifact Resolution Service: /Common/testsaml
- Assigned Signing Key and Certificated: /Common/default.key /Common/default.crt
Also I registered the SP data and bounded it with the IdP.
Why when I do an SP-initiated SSO and the AuthNRequest is sent to the APM IdP SSO endpoint: https://f5.example.com/saml/idp/profile/redirectorpost/sso a 404 is showed?
Thanks for your help, I reviewed everything but I can not find the reason.
2 Replies
- Gianrico
Employee
Do you need artifact binding ? Can you un-select it?
So far i've never used artifact binding and i am not sure if that could be the issue.
gianrico
- Michael_Jenkins
Cirrostratus
Just to verify, within your access policy, you set the SAML resource as an allowed resource, correct (e.g. in and
action)?Advanced Resource Assign
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
