Forum Discussion
Rohit_Singla_17
Nimbostratus
NimbostratusRelayState Parameter Value for F5 (as IDP) initiated connection to Google Apps/Mail
Hello Experts,
I am trying to create a SAML SSO. Below are the details
F5 is acting as IDP
Google GSuite is acting as SP (we intent to use gmail, drive etc from google with Auth by F5 APM...
Have you already checked the Deployment guide? https://www.f5.com/pdf/deployment-guides/saml-idp-saas-dg.pdf
Rohit_Singla_17Nimbostratus
NimbostratusIt will be SP initiated, for e.g. Just go to Mail.google.com and then it will take you to APM policy
On the APM policy Virtual Server, we added the below irule to make the seamless opening of GMAIL, The location in this irule is the SAML resource for the GSUITE.
ltm rule /Common/Auto-Launch { when ACCESS_POLICY_COMPLETED { ACCESS::respond 302 Location "/saml/idp/res?id=/Common/idp.uti.app/idp.uti_UTI_saml_resource_sso" } when ACCESS_ACL_ALLOWED { ACCESS::respond 302 Location "/saml/idp/res?id=/Common/idp.uti.app/idp.uti_UTI_saml_resource_sso" }