For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tinkertwain's avatar
tinkertwain
Icon for Nimbostratus rankNimbostratus
Mar 23, 2019

F5 APM nameid management

In typical SSO environment, user accounts are maintained by IdP. Many service providers also maintain a local database of active users. They map nameid coming as part of SAML assertion from IdP to a ...
BIG-IP Access Policy Manager (APM)
devops
LTM
security
AMiles_377865's avatar
AMiles_377865
Icon for Cirrocumulus rankCirrocumulus
Mar 26, 2019

Hello Manish,

 

I've looked through F5's documentation, and I don't think that there's a way to view/edit nameid. My best guess would be that APm doesn't log inactive/active accounts, or else APM prunes anything it creates by itself, as F5 has no documentation on deleting unused service accounts. Maybe I just haven't looked hard enough but that's my take.

 

Best of luck,

 

Austin

 

tinkertwain's avatar
tinkertwain
Icon for Nimbostratus rankNimbostratus
Mar 27, 2019

Hi Austin,

 

Yes, that seems to be the case. i.e. APM does its own nameid management and deletes it after some time.

 

I posed the same question to our SE and above was the answer I got. Good, one fewer thing to worry about.

 

Thanks a ton for looking into it.

 

Manish