Forum Discussion

THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Jun 30, 2014

AzureAD as SAML IdP / logout problem

I have set up MS AzureAD as a SAML IdP and local BIG-IP APM VIP as SAML SP. SAML federation/login to SP goes ok, but how to do SAML logout request to AzureAD? Azure assumes a signed SAML logout reque...
BIG-IP Access Policy Manager (APM)
microsoft
security
windows azure
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 30, 2014

The exported Azure IdP metadata should already have the SLO URIs in it, so you should see these values when you import as an external IdP connector in your APM SP config. I can't imagine that a separate metadata export would be required. As for Azure supporting signed authn requests, it also stands to reason that if it supports signed logout requests, it should also support the same for authn.