For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_125354's avatar
Mike_125354
Icon for Nimbostratus rankNimbostratus
May 16, 2013

F5 SAML Authentication

One month ago, we opened a case to F5 about SAML Authentication, haven't got the prober answer yet. Disappointing...   While still waiting for their answer, I wish here I can reach someone who...
security
jussihar's avatar
jussihar
Icon for Nimbostratus rankNimbostratus
May 07, 2014

Hello

 

Any updates on this?

 

Jussi

 

jussihar's avatar
jussihar
Icon for Nimbostratus rankNimbostratus
May 07, 2014
Yes. IDP is external and I dont have access to it, the IDP admin says all is good there according to logs. F5 apm logs says: modules/Authentication/Saml/SamlSPAgent.cpp func: "verifyAssertionDigest()" line: 3625 Msg: Assertion Content without Signature modules/Authentication/Saml/SamlSPAgent.cpp func: "verifyAssertionSignature()" line: 4037 Msg: ERROR: verifying the digest of SAML R esponse failed to process signed assertion, error: Digest of SignedInfo mismatch