Forum Discussion
Slayer001
Cirrus
CirrusF5 APM SAML skip MFA for X days
We have a single sign-on setup that works with SAMLv2 where F5 APM is the Idp and authentication is done via MFA. This works for single sign-on within the same browsing session. If a user connects to...
Just thinking out loud here... maybe you could turn on Multi-Domain SSO and create an iRule to set a persistent cookie. In that (encrypted) cookie you set a hash that is created from the combination username, user-agent and IP address. The persistant cookie expires after X days. If the cookie is send and the hash matches, then skip MFA.
