For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steirtet's avatar
steirtet
Icon for Nimbostratus rankNimbostratus
Sep 09, 2014

APM in clientless mode, support for SAML

Hello, I am looking for a solution to have SAML support in clientless mode. The fact is that my client application does not support any redirect. When the client connects to the SAML SP, no redirect ...
BIG-IP Access Policy Manager (APM)
saml
security
steirtet's avatar
steirtet
Icon for Nimbostratus rankNimbostratus
Sep 09, 2014

Hi,

 

Thanks for the answer, but this iRule retrieves the username/password without using SAML. The problem with SAML is that is using redirects between the SAML SP and the SAML IdP. In this case, redirects are not supported and not allowed. The problem remains, how to solve this via an iRule?

 

Thierry

 

Gabriel_V_13146's avatar
Gabriel_V_13146
Icon for Cirrus rankCirrus
Sep 09, 2014
If you really must be clientless - maybe the link provided is what you need.. Your application could send a SAML Soap message with username and password (or other credentials) and you will need to update the provided irule to dig the data from XML instead of a simple post..