Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Gabriel_V_13146's avatar
Gabriel_V_13146
Icon for Cirrus rankCirrus
Mar 04, 2014

F5 APM SAMLResponse - invalid XML

Hello all, trying to use the F5 APM as a SAML IdP, so far testing with simpleSAMLphp as a SP. Apparently I have something misconfigured (that happens). The problem is with the SAMLResponse we get bac...
BIG-IP Access Policy Manager (APM)
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 04, 2014

I think the issue is actually that your SAMLRequest is sending an invalid NameIDPolicy. SimpleSAMLPHP sends by default, I believe, a "transient" NameIDPolicy. So in your APM Local IdP Services config, in the Assertion Settings section, make sure the Assertion Subject Type is set to "Transient Identifier".