For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
Feb 26, 2014

Confused by domains on NTLM SSO configuration screen

I read the help but I'm still confused at to way there are two domain fields on the NTLM sso configuration screen. What is the difference between the domain source and NTLM domain fields? Domain source seems to be spefied domain the user's account is located in, but I don't get the NTLM domain. Is the NTLM domain the specified domain servers that we should be going against? Also we have an empty root forest and a resource forest will this cause problems (I have it working but I did via trial and error and I need to understand some of the mechanic (also if you can point me to an article that would be good for me).

 

BIG-IP Access Policy Manager (APM)
security

1 Reply

  • a_pavlov_114144's avatar
    a_pavlov_114144
    Icon for Cirrus rankCirrus
    Feb 26, 2014

    NTLM Domain Specifies the location of the domain where all users and groups are authenticated. Defaults to a session variable.

     

    So in the "credentials source" form you should enter variables to use as credentials and in the NTLM Domain field you should enter actual domain in which BIGIP would make authentication.