For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Harpe_6170's avatar
Mike_Harpe_6170
Icon for Nimbostratus rankNimbostratus
Aug 30, 2016

Issue with double encoded redirect URI

Have the following configured to talk to SAML IdP using BIG-IP as SP. Version BIG-IP 12.1.0 Build 1.0.1447 Hotfix HF1 apm aaa saml-idp-connector DSLOGON-PORTAL-IDP-CONNECTOR { artifact-resolu...
BIG-IP Access Policy Manager (APM)
security
Mike_Harpe_6170's avatar
Mike_Harpe_6170
Icon for Nimbostratus rankNimbostratus
Aug 30, 2016

The issue is that when the F5 sends the Single sign on redirect the double encoded part of the URI is being unwrapped and that's causing problems at the IdP.

 

I managed to clean up the posting some. I hope that helps.