Forum Discussion

Manoj_Chavali's avatar
Manoj_Chavali
Icon for Nimbostratus rankNimbostratus
Jun 12, 2020

Granular Access control policies

We are trying to use the Big IP system as a SAML service provider and PingFederate as a SAML Identity Provider.  Is it possible to create an access policy which allows/denies user to access a particu...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
Manoj_Chavali's avatar
Manoj_Chavali
Icon for Nimbostratus rankNimbostratus
Jun 15, 2020

Hi,

 

Thank you for the information. Could you please point me towards any document on how to implement the authorization based on the LDAP attributes?

youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jun 15, 2020

Hi,

 

First of would you check authorization on IDP or SP? The best practice is to check authorization  on SP side, the IDP will return attribute to SP then SP will manage authorization.

 

So you confirm that your SP is hosted on F5?

 

regards