For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Jun 17, 2014

Network SSO with Layered Virtuals

Hi,

 

I've read the guide on how to do this in Common Deployment Examples for Single Sign-On, but even after reading the section "Configuring network access for SSO with web applications" and subsequent sections I still do not understand what is happening here.

 

If I follow this guide and spin up an Edge Client VPN login does that mean any web services hosted on the same BIGIP with a relevant SSO item attached will gain the same sign-on credentials? The missing link appears to be what does this look like in the VPE...

 

Would really appreciate some guidance on how this is supposed to work.

 

BIG-IP Access Policy Manager (APM)
design
security

1 Reply

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Jun 17, 2014

    Generally for each web application need to create a layered virtual server(forwarding VS with destination that matches the web application IP).

     

     

    The VPE for the layered VS will be a dummy access policy with SSO credential mapping.