Forum Discussion
APM - IdP endpoint not working, returns a 404
I want to connect BIG-IP APM with simpleSAMLphp SP. I followed this guide but when the SP sent the SAML AuthNRequest to the APM IdP, it shows a 404 error.
This is how my environment is configured (notice that ip and hostnames here are not real, but has the same look like that originals):
- Partion: Common
- hostname: f5.example.com
- IP Address: 10.4.12.133 (not real)
I created a Virtual Address 10.4.12.134
I created a Virtual Server named testsaml:
- Source Address: 0.0.0.0/0
- Destination Address: 10.4.12.134
- Service Port: 443 / HTTPS
- State: Enable
- SSL Profile (Client): Common/clientssl
- SSL Profile (Server): Common/clientssl
And using an Access Profile test:
- Partition / Path: Common
- Parent Profile: access
- Profile Type:All
- SSO Domain: Single Domain
- SSO COnfiguration: testsaml
And has an IdP: testsaml with the following data:
- IdP EntityID: https://f5.example.com/testsaml
- Artifact Resolution Service: /Common/testsaml
- Assigned Signing Key and Certificated: /Common/default.key /Common/default.crt
Also I registered the SP data and bounded it with the IdP.
Why when I do an SP-initiated SSO and the AuthNRequest is sent to the APM IdP SSO endpoint: https://f5.example.com/saml/idp/profile/redirectorpost/sso a 404 is showed?
Thanks for your help, I reviewed everything but I can not find the reason.
- GianricoEmployee
Do you need artifact binding ? Can you un-select it?
So far i've never used artifact binding and i am not sure if that could be the issue.
gianrico
- Michael_JenkinsCirrostratus
Just to verify, within your access policy, you set the SAML resource as an allowed resource, correct (e.g. in and
action)?Advanced Resource Assign
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com