For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

WillUsable_1958's avatar
WillUsable_1958
Icon for Nimbostratus rankNimbostratus
Jun 06, 2017

F5 ADFS iApp to replace the ADFS proxy (WAP)

We are having issues using the AD FS iApp for the ADFS proxy with ADFS certificate multi-factor authentication enabled. The iApp created two VIPS, one on port 443 with access policy assigned, and one...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
Corey_12957's avatar
Corey_12957
Historic F5 Account
Jan 02, 2018

Hello @WillUsable,

 

Native ADFS integration using the adfs-pip protocol, including certificate support is included in version TMOS v13.1.

 

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-third-party-integration-13-1-0/12.htmlguid-1ee8fbb3-1b33-4982-8bb3-05ae6868d9ee

 

For versions prior to 13.1 please reference the deployment guide/iApp.

 

https://www.f5.com/pdf/deployment-guides/microsoft-adfs-dg.pdf

 

Page 20 highlights what needs to be done to support certificate authentication.