Forum Discussion
That_guy_122842
Nimbostratus
Oct 30, 2013APM SAML - Whats the best way to have multiple IDPs using one VIP
So You can map one IDP to one access policy, and many SP's to a single IPD.
Whats the best practice to map multiple IDPs to one VIP?
Kevin_Stewart
Employee
Aug 21, 2015I may have steered you a little wrong in your other thread. The "IdP-initiated without webtop" piece didn't fully sink in. 😉
In any case, that isn't a "supported" configuration, but there is a workaround. With your working IdP-initiated config (resource assignment, SAML resource, webtop), add the following iRule to your IdP VIP:
when ACCESS_POLICY_COMPLETED priority 30 {
ACCESS::respond 302 Location "/saml/idp/res?id=/Common/saml_resource"
}
where "/Common/saml_resource" is the name of your SAML resource object. It's basically the same thing as actually clicking the link.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects