F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

C_Kim's avatar
C_Kim
Icon for Nimbostratus rankNimbostratus
Oct 09, 2017

Can a VIP belong to multiple SSO Multi-domain configurations?

For multi-domain support, is it possible for a VIP to belong in two separate multi-domain configurations?   I have one configuration with the following:   apples.company.com (primary authenti...
application delivery
BIG-IP Access Policy Manager (APM)
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Oct 09, 2017

Hi,

 

The problem is how multi domain sso works!

 

When connecting to grannysmith.company.com, the user is redirected to apples.company.com to request authentication cookie even if user is already authenticated to apples.company.com

 

So, the multi domain url will be set by the access policy assigned to the vs managing plants.company.com

 

One solution is to add an irule to force cookie insert to plants when login to apples or oranges.