Forum Discussion
That_guy_122842
Nimbostratus
Oct 30, 2013APM SAML - Whats the best way to have multiple IDPs using one VIP
So You can map one IDP to one access policy, and many SP's to a single IPD.
Whats the best practice to map multiple IDPs to one VIP?
Kevin_Stewart
Employee
Aug 21, 2015I may have steered you a little wrong in your other thread. The "IdP-initiated without webtop" piece didn't fully sink in. 😉
In any case, that isn't a "supported" configuration, but there is a workaround. With your working IdP-initiated config (resource assignment, SAML resource, webtop), add the following iRule to your IdP VIP:
when ACCESS_POLICY_COMPLETED priority 30 {
ACCESS::respond 302 Location "/saml/idp/res?id=/Common/saml_resource"
}
where "/Common/saml_resource" is the name of your SAML resource object. It's basically the same thing as actually clicking the link.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects