Forum Discussion
NimbostratusAPM/LTM 12.1: SAML IdP and SP possible in one VE?
BTW this will only work if you're not using HTTP artifact binding with SAML2.0.
Having said that you can still configure artifact resolution service if you use HTTP for your VSs. That will come in handy if you just want to lab test, but not for production use for obvious reasons.
[Artifact resolution service] https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/27.html
NimbostratusCould you please elaborate on why this does not work with HTTPS and artifact binding on the same BIG-IP instance? I see the TCP handshake from the host not beein followed up by a client_hello for TLS but rather sending a straight HTTP-post.
When I read your comment I changed to HTTP and that works, but is really suboptimal..
