Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Feb 04, 2016

Native oAuth2.0 and OpenID Connect support in APM

Hello,   Could someone please specify if these features are to be expected in a next major release? Our sales rep confirmed they are in a "todo list", but nothing more specific.  
BIG-IP Access Policy Manager (APM)
security
Saravanan_M_K's avatar
Saravanan_M_K
Icon for Employee rankEmployee
Feb 04, 2016

oAuth2.0 support is expected in the next major release (13.0). There is a beta program coming up in the following weeks to allow customers to actively test their use cases.

 

BIG-IP APM OAuth support provides OAuth federation and API protection for enterprise and partner use cases. BIG-IP APM can be configured as OAuth Authorization Server, Client and Resource Server. The following lists the supported features and use cases for the OAuth Beta program:

 

BIG-IP APM OAuth Authorization Server Features for Beta:

 

  • Support for Resource Owner Password Credentials (RPOC), Auth Code and Implicit grants,
  • Persistent Token support
  • Admin UI and TMSH support for configuration
  • TMSH support for token management

BIG-IP APM OAuth Client Features for Beta:

 

  • Support for F5 Authorization Server and Google Authorization Server. Only user info profile scope is supported for Google Authorization Server.
  • Support for Auth Code and ROPC grants.

If you are interested in participating in the oAuth beta program, contact your sales rep and ask him to enroll you in the beta program.