For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hpr_220139's avatar
hpr_220139
Icon for Nimbostratus rankNimbostratus
Feb 14, 2018

APM/LTM 12.1: SAML IdP and SP possible in one VE?

Hi, Is it possible to run an SAML IdP and one (or better: more) SPs on one VE? I found a sentence in the doc: In a federation of BIG-IP-Systems, one BIG-IP System acts as a SAML Identity Provider and...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
Daniel_Varela's avatar
Daniel_Varela
Icon for Employee rankEmployee
Feb 14, 2018

It is possible, I have done that many times in my lab. You need to be careful and configure you vs with different dns names to avoid get the browser to send the apm cookie it has for the Idp session when it access the Sp (the sp will be confused to see apm cookies for a session that is not started)

 

Keep in mind that you are doubling up the number of sessions in this deployment, one for the Idp and one for the Sp.