For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Roe_60070's avatar
Mike_Roe_60070
Icon for Nimbostratus rankNimbostratus
Jan 27, 2011

APM SSO acrossed multiple domains.

Hi all, I have been told this is possible but, am not sure just how ad I cant get any info on it elsewhere. Is there any way I can have an SSO profile work across multiple domains. I have an few apps that sits on one VS but has 7 different DNS names. Each is secured with basic auth but, when the user passes from one domain to another they have to re-authenticate. Thoughts on how to make this SSO work for all 7 domains?

 

 

Thanks

 

app sec
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • Mike_Roe_60070's avatar
    Mike_Roe_60070
    Icon for Nimbostratus rankNimbostratus
    Mar 07, 2011
    Found what I needed here

     

     

    http://devcentral.f5.com/wiki/default.aspx/APM/ShareAccessCookies.html

     

     

    Thanks to F5 support!
  • Wand_97484's avatar
    Wand_97484
    Icon for Nimbostratus rankNimbostratus
    Apr 05, 2011

    Hi there,

     

    I just read the "Share access Cookies" and this looks awesome.

     

    I would like to combine it with a openSSO/openAM Server in the back, to enable session awarness between two LTM/APM clusters and authorization rules applied in openAM.

     

    I also found the iRule which lets the LTM act as openSSO / openAM Agent http://devcentral.f5.com/wiki/defau...ation.html

     

     

    Did someone tried to add a openSSO/openAM server as AAA server (type HTTP?) in the access policy?

     

     

    Thanks

     

    Jens