For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dathi's avatar
Dathi
Icon for Nimbostratus rankNimbostratus
Sep 30, 2020

APM SAML CITRIX Stroefront

Using APM as SAML SP with external Idp connector ADFS. Followed this article https://devcentral.f5.com/s/articles/citrix-federated-authentication-service-integration-with-apm-24489:   F5 is pass...
application delivery
BIG-IP Access Policy Manager (APM)
dromerot's avatar
dromerot
Icon for Nimbostratus rankNimbostratus
Dec 15, 2020

Hi Dathi,

 

Have you able to pass SSO to Storefront? I don't see any traffic from APM to Storefront. Only health check traffic. I see the log "Following rule 'fallback' from item 'Session Variable Assign' to ending 'Allow'" but I don't see any packet from APM to Storefront.

 

However, I can see the right SAML Assertion and the right username got from IdP in the APM.

 

Thanks, best regards.

  • Dathi's avatar
    Dathi
    Icon for Nimbostratus rankNimbostratus
    Dec 15, 2020

    No, actually, it stands as is. F5 tech support was not able to determine the flow or the bottleneck. I am still looking for answers.

    • dromerot's avatar
      dromerot
      Icon for Nimbostratus rankNimbostratus
      Dec 15, 2020

      Hi Dathi,

       

      Thanks.

       

      On the other hand, I see an iRule in the Virtual Server, which has been added automatically with the iApp and I don't know if I have to delete it.

       

      I've read in the link you posted "12/21/2016 - Removed an iRule that is not needed for SSO to function properly in a complete deployment".

       

      Maybe we have to delete this iRule! I don't know!

       

      Thanks, best regards.