Forum Discussion

Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
Jun 30, 2015

APM IdP SAML config for sharefile

Hi all, we try configuring a SAML config with an F5 SAML guide. Our system should have F5 as a SAML IdP and sharefile.com as SP. Does anyone has expirience with this architecture? What we already...
BIG-IP Access Policy Manager (APM)
citrix
security
Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
Jun 30, 2015

thanks for your fast answer - i get the following error messages.

Jun 30 17:33:10 slot1/shd-adc-1 err tmm[17069]: 014d0002:3: 58d3067c: SSOv2 Error: No SP Connector attached to SAML SSO from assigned SAML resources matching authentication request. If ACS URL is present in authentication request it should match ACS URL from SP Connector. If Issuer is present in authentication request it should match entity_id from SP connector.
Jun 30 17:33:10 slot1/shd-adc-1 err tmm[17069]: 014d0002:3: 58d3067c: SSOv2 Error(16) Unable to find SAML SSO/SP Connector  object matching SAML Authn Request

maybe I didn't understand anything correct, but the line 

https://serviceat.sharefile.com/saml/info

in request shows, that the issuer is the same as configured in APM (External SP connector - General settings - Entity ID).

also the acs URL from the request

AssertionConsumerServiceURL="https://serviceat.sharefile.com/saml/acs?idpentityid=http://auth.customer.com"

is the same as configured in APM (External SP connector - endpoint settings - ACS URL).

Can you please explain, why you think acs is different?

Thanks, Philipp