For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nicotrel's avatar
Nicotrel
Icon for Nimbostratus rankNimbostratus
Aug 30, 2018

APM - Okta Encrypted Assertion

Good day,   We have recently started to use APM as SP for some of our sites and Okta as idP. We followed this guide Okta Integration Guide for Web Access Management with F5 BIG-IP as a basis when ...
BIG-IP Access Policy Manager (APM)
security
svs's avatar
svs
Icon for Cirrostratus rankCirrostratus
Apr 02, 2020

Hi,

 

did you have any luck with changing the behavior of Okta? For 15.1.x it seems that the issue is still not resolved and while reconfiguring the Okta IdP there is only the Key Transport Algorithm, which doesn't change anything.

 

The issue is tracked under ID 485387 (https://techdocs.f5.com/kb/en-us/products/big-ip_apm/releasenotes/product/relnote-apm-11-5-0.html#rn_ki_apm_1150), which is not listed in the Bug Tracker.

 

From my understanding it seems to be not possible to encrypt the assertion between F5 BIG-IP and Okta. Or is my understanding wrong?

 

 

Regards

Nicotrel's avatar
Nicotrel
Icon for Nimbostratus rankNimbostratus
Apr 02, 2020

After discussing with our security team, they agreed that we could go with non-encrypted for the assertion. We are only on 13.1 so we have not done anymore research testing with this.

 

Jason