For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sajid's avatar
Sajid
Icon for Cirrostratus rankCirrostratus
Jul 20, 2019

F5 APM as IdP for Ezproxy OCLC (SaaS as SAML SP) redirect to discovery link

Discovery Link

https://customername.idm.oclc.org/login?url=http://gateway.proquest.com/

 

When user click it redirect to SP > to > IdP (F5 APM) for authentication.

 

F5 APM IdP assertion to https://login.customername.idm.oclc.org/Shibboleth.sso/SAML2/POST after that browser load this url https://login.customername.idm.oclc.org/menu

 

Is it possible, browser redirect to original referer url with SP to IdP SAML assertion "https://customername.idm.oclc.org/login?url=http://gateway.proquest.com/"

 

 

 

Regards,

S.A

 

BIG-IP Access Policy Manager (APM)
security

1 Reply

  • Sajid's avatar
    Sajid
    Icon for Cirrostratus rankCirrostratus
    Jul 24, 2019

    issue resolved using this irule:

     

    when ACCESS_POLICY_COMPLETED {

      if { [ACCESS::session data get session.server.landinguri] == "/saml/idp/profile/redirectorpost/sso" } { 

      } else {

        ACCESS::respond 302 Location "/saml/idp/res?id=/Common/webtop_resource_name"

      }

    }