For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Evan_Champion_1's avatar
Evan_Champion_1
Icon for Cirrus rankCirrus
Jan 04, 2016

Kerberos and APM-based SAML IdP

I am stuck getting transparent Kerberos authentication to work with my F5 APM-based SAML IdP. The user's first access to the IdP is successfully transparently authenticated. Following session expir...
BIG-IP Access Policy Manager (APM)
saml
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Jan 04, 2016

Hi Evan,

 

I did investigate this a bit, and there does not appear to be a viable workaround, unfortunately, as you noted. Can I ask you to please open a support case with F5 and ask for it to be linked to that BZ as a request to fix it? Meanwhile, I am pursuing the urgency of this internally, and will post more details as we find out when exactly the issue will be addressed.

 

Evan_Champion_1's avatar
Evan_Champion_1
Icon for Cirrus rankCirrus
Jan 04, 2016
Thanks Michael -- yes, I will open a support case. This is a big problem for us not only for deployment of the planned SAML single sign-on service, but also for two other projects in-train using APM to provide Kerberos login to applications that don't support Kerberos. I would very much appreciate anything you can do internally to get the issue prioritised, while I try through the technical support team. I would be very happy to help test the fix.