Forum Discussion

Saty_Attota_201's avatar
Saty_Attota_201
Icon for Nimbostratus rankNimbostratus
Sep 20, 2017

APM redirect to saas url after login

Created F5 APM with SAML sso with SaaS application. This is multi-domain SSO login/Portal. This is how I want it to work.

 

Cloud url https://myschool.instructer.com --> redirects to https://mylogin.mycollege.edu --> enter credentials -> after validating credentials F6 as idp supposed to get attributes and redirect to https://myschool.instructer.com .

 

But after entering credentials, control moves to portal. In portal if I click webtop link then I could go to https://myschool.instructer.com.

 

Could any one suggest how to achieve my objective.

 

Thanks Saty

 

BIG-IP Access Policy Manager (APM)
cloud
iRules
  • Jad_Tabbara__J1's avatar
    Jad_Tabbara__J1
    Icon for Cirrostratus rankCirrostratus
    Sep 20, 2017

    Could you share the VPE of your IDP... I think in your VPE you are assigning portal access with a webtop you need to modify this.

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Sep 22, 2017

    Hi,

    irule event is not the good solution.

    APM have some events you can use:

    • ACCESS_SESSION_STARTED : before VPE Evaluation and before 302 redirect to /my.policy
    • ACCESS_POLICY_COMPLETED : after VPE Evaluation and before 302 redirect to landing uri

    If you do a redirect in ACCESS_POLICY_AGENT_EVENT, I'm not sure it will work and your access session will never complete.

    In your case, I recommend to use ACCESS_POLICY_COMPLETED

    when ACCESS_POLICY_COMPLETED {
    set path [ACCESS::session data get session.server.landinguri]
    set host [ACCESS::session data get session.server.network.name]
    if { $path contains "Test_canvas_idp" } {
        HTTP::redirect "https://sierra.test.instructure.com";
    }
}

    for information, the answer already exists in previous questions