Forum Discussion

wwylie_122896's avatar
wwylie_122896
Icon for Nimbostratus rankNimbostratus
Jul 25, 2014

Big-IP as IDP with Salesforce.com - Configuration help?

I'm brand new to SSO and I'm trying to configure our Big-IP as an IDP and Salesforce as the SP using SAML 2.0. Logins will be SP Initiated since most users go straight to Salesforce.   I've searc...
BIG-IP Access Policy Manager (APM)
deployment
saml
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Jul 25, 2014

wwylie,

 

I think you might've hit it right on the head - I am not sure about SFDC, but I have basically seem various SP not work properly with APM as IDP if the wildcard cert is used to sign the assertion(experienced that with Office 365). Try change it to a private unique single-host cert and see if the problem goes away - I sure hope it is going to be as simple as that.