For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chenge's avatar
chenge
Icon for Nimbostratus rankNimbostratus
Sep 17, 2024

Azure to APM to StoreFront

Need help with setup of Azure SSO to F5 APM to Storefront. I'm trying to pass my Azure credentials to F5 APM and then once authenticated, use that SSO credential to login to storefront. Create the en...
azure mfa
storefront
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Sep 18, 2024

Ordinarily you wouldn't pass login credentials (like a password) directly to an SP. Instead, you create a chain of trust so that each SP can send a SAML AuthN to the prior link in the chain, then the prior link sends the next link a SAML Assertion. This avoids the security problems with passing around credentials.

Azure (IdP) -> APM (combined SP and IdP) -> Storefront w/FAS (SP)

 

 This discussion covers federated SAML in this kind of scenario:

Citrix Federated Authentication Service Integration with APM | DevCentral