For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
May 03, 2017

APM SSO between multiple virtual server (single domain)

Hi All,   We are trying to deploy a SSO Authentication between multiple Virtual Server. All are related to the same domain (mycorp.com)   We tried to find a correct setup in APM with SSO (Singl...
application delivery
BIG-IP Access Policy Manager (APM)
Jason0_309417's avatar
Jason0_309417
Icon for Cirrus rankCirrus
May 03, 2017

Try using the same APM policy for each virtual server. On the "SSO/Auth Domain" tab of the access profile, select single domain and put mycorp.com under domain cookie.

 

To control how long a user can remain authenticated you'll have to change the timeout values under the access policy "Properties" tab and change the cookie type to persistent under "SSO/Auth Domain".

 

ndaems_145583's avatar
ndaems_145583
Icon for Nimbostratus rankNimbostratus
May 03, 2017

Hi,

 

Thank you for the update

 

I forgot to mention that each VS have multiple fqdn pointing on it.

 

Our APM VPE is very basic and use a SAML Auth to an exernal IdP (ADFS). So F5 is running as SP. We need to be sure that the SAML assertion will be sent back to the correct APM. Due to the multiple FQDN I'm a bit lost and don't know how to implement this

 

Thank you