Luis_Melendrez
May 26, 2021Altostratus
How to create an APM policy for on-prem application that uses SAML
Hello,
I would like some guide on how to configure and APM policy and SSO. Basicalli, present a portal to force authentication when accessing https://mysite.example.com for example
https://mysite.example.com is an on-prem application which is configure for ADFS saml authentication on an external IdP.
Before putting an APM policy the traffic flow goes as follows.
- User access https://mysite.example.com (this app is behind f5 LTM)
- mysite.example.com redirects user to authenticate to myadfs.example.com and gets prompted by ADFS for username and password.
- myadfs.example.com authenticates and redirects back to mysite.example.com
- User is able to access mysite.example.com.
After adding APM policy the traffic flow goes as follows.
- User access https://mysite.example.com (this app is behind f5 LTM)
- F5 presents a prompt for username and password (AD authentication)
- User is successful authenticated.
- Access is granted to https://mysite.example.com
- mysite.example.com redirects user to authenticate to myadfs.example.com ("AGAIN", can this be prevented since they already authenticated) and gets prompted by ADFS for username and password.
- myadfs.example.com authenticates and redirects back to mysite.example.com
- User is able to access mysite.example.com.
Any advice really appreciated.