How to configure smart card authentication on F5 IDP?

Configure an ssl client profile for the IDP virtual server. Under client authentication select request or require for Client Certificate. You also need an ssl server certificate for the URL of your IDP. You specify this under the ssl client profile under Certificate Key Chain. Apply the ssl client profile to the virtual server. You might also need to configure an OCSP profile and apply it to the virtual server and create a certificate bundle for the trusted certificate authorities. You should also have a decision box in your APM access policy that check the cert status and grants/denies access based on this.