For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SP_User_160448's avatar
SP_User_160448
Icon for Nimbostratus rankNimbostratus
Jun 10, 2014

F5 APM as an authentication web proxy

Hi,

 

I'm new to F5 and have questions about integrating with Azure ACS as authentication provider (AP) for our SharePoint 2010/2013 based extranet solution. I've read in bits and pieces that Azure ACS follows WIF (Windows Identity Foundation) and relies on WS_Federation protocol for SAML based authentication and not SAMLP which is currently used by F5. If that holds true then this scenario makes F5 web proxy not a workable solution for any Azure ACS based SharePoint system.

 

Can you share your experiences in using ACS for a SharePoint solution using F5 APM web proxy.

 

Thanks in advance

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
design
LTM
security

2 Replies

  • SP_User_160448's avatar
    SP_User_160448
    Icon for Nimbostratus rankNimbostratus
    Jun 17, 2014

    Thanks for your response, I've gone through this post before, just wanted to get a quick expert opinion as things are not crystal clear regarding the support for ACS. I also have an alternate question regarding the F5 modules we need to use to achieve the Extranet scenario exposing SharePoint On-Premise app to external users. The scenario i see here goes are following:-

     

    External User sends out a secure request to SP Url which is intercepted by F5 proxy server. Proxy server relays the information to Azure ACS which performs ADAuth and/or 2-Factor authentication against a WAAD (Azure AD holding details of external users). Once the authentication is done request is relayed to internal servers.

     

    Please share your suggestion in terms of F5 modules i need to get a license for and also help me validate the extranet scenario for feasibility of solution.

     

    Thanks in advance!