For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard_Jones's avatar
Richard_Jones
Icon for Nimbostratus rankNimbostratus
Nov 25, 2013

Configuring SSO for multiple hostnames pointing at the same VIP

I have three applications (app1, app2, and app3) all running as virtual hosts on one web server. I have an LTM virtual server configured to point to this web server (via a pool), and everything work...
BIG-IP Access Policy Manager (APM)
deployment
security
tiny_cloud_ninj's avatar
tiny_cloud_ninj
Historic F5 Account
Nov 26, 2013

Access Policy Manager has a feature named Domain Cookie. Domain Cookie is a configuration option that allows an administrator to link or SSO two or more APM access Profiles. If two APM Access Profiles share the same Domain Cookie value. One APM Access Profile will access a valid user session from another. Meaning if a user successfully authentications to one APM Access Profile. They will not be required to authenticate to the second web application. When the client attempts to access the second web application the APM will send the Username and Password to the defined SSO configuration object. If configured correctly the user should automatically be logged into the second web application.

 

http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-4-0/5.htmlconceptid