For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

eugeneK_pdx's avatar
eugeneK_pdx
Icon for Nimbostratus rankNimbostratus
Jan 27, 2017

APM SAML IdP with Kerberos authentication

I would like to use APM lite to serve as SAML IdP with Kerberos authentication. The idea is to allow users already logged-in to the Windows domain to not get prompted when external SP is redirected t...
BIG-IP Access Policy Manager (APM)
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jan 29, 2017

you are right the information is somewhat generic, but i doubt you will find a document connecting it all for you.

 

to connect an BIG-IP as IdP (without SSO portal) to a access policy you set it as SSO method.

 

to connect Kerberos as authentication you just add the Kerberos Auth in the access policy instead of the logon page.

 

as for doing Kerberos as authentication (not SSO) method see this info: https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/9.html