For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hugo_Frauches_2's avatar
Hugo_Frauches_2
Icon for Cirrus rankCirrus
Sep 28, 2017
Solved

APM: SSO between two virtual servers

Hello,   Im having a hard time configuring SSO for multiple Virtual Server, i dont know the right way to work with Multi domain SSO, i need some advices on how multiple domain sso works.   I ha...
application delivery
BIG-IP Access Policy Manager (APM)
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Oct 03, 2017

    Hello Hugo,

     

    Not sure why you are using multi domain SSO when from all accounts your domain is not changing. app1.domain.com/app2.domain.com

     

    Just specify domain.com as your SSO domain and use single domain SSO. Then when you go to the second virtual server with its own policy include the same SSO object.

     

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 03, 2017

Hello Hugo,

 

Not sure why you are using multi domain SSO when from all accounts your domain is not changing. app1.domain.com/app2.domain.com

 

Just specify domain.com as your SSO domain and use single domain SSO. Then when you go to the second virtual server with its own policy include the same SSO object.

 

Hugo_Frauches_2's avatar
Hugo_Frauches_2
Icon for Cirrus rankCirrus
Oct 05, 2017

Dear Kevin,

 

Thanks for the reply, i tried to use the single SSO Domain configured in the Virtual Servers APM policies but didnt worked with separed policies, so i had to make some changes, i setup a single APM Session Policy for both Virtual Servers but i have created different Per-Request APM policy for each Virtual Server and it worked! When the user click on the link and open the iFrame its calls the other virtual server and it uses the Cookie Domain Auth for SSO, but the autorization its made in the Per-Request Policies.