Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

D__Yutzy_151141's avatar
D__Yutzy_151141
Icon for Nimbostratus rankNimbostratus
May 30, 2014

Best Practice for SAML, F5

I currently have a situation where the team as designed the following for SAML:   Active/Passive If server A goes dead, server B becomes active. When server A comes back online, I now have an act...
design
security
D__Yutzy_151141's avatar
D__Yutzy_151141
Icon for Nimbostratus rankNimbostratus
May 30, 2014

The way the F5 is configured today is it routes all SAML requests to a single server, if that server becomes unresponsive then it routes all traffic to a second server. This is what I refer to as actrive/passive.

 

When this event occurs, the second server becomes the primary, active server. If the first server comes back online, I now have a situation where the F5 recognizes both as active and begins to route traffic to "both" servers, it doesn't revert back to one = primary and two = passive.