Forum Discussion
Replacing f5 with ADFS Web Application Proxy
So the question here is : Is there a way to replace f5 as ADFS web application proxy and leave the ADFS Proxy servers as it is.
The configuration currently comprises of
- 2012 DMZ ADFS Web Apps Proxy - config as pass-through (HA Pair - Load Balanced Performance Layer 4 by f5)
- 2012 ADFS Servers (Internal) (HA Pair - Load Balanced Performance Layer 4 by f5)
Every few weeks the web apps proxy develops some issue and stops communicating and we had to do call in experts. the backend 2012 ADFS servers has better record of getting hung every 3 months. If we bypass the webapps proxy - IE users from outside doesn't see the ADFS landing page with mandatory warning banner, which is required by my customer. This bypass of the landing page is due to IE trying to do Windows Integrated Auth, which prompts for username/password prompt - rather than a adfs url page. However other non IE browsers i.e. Chrome, renders the custom landing page just fine.
Circling back to the main Q - is there a way I can bypass the web apps proxy server and still get the same results.
Thanks,
http://goodworkaround.com/node/53
4 Replies
- JimW_156953
Nimbostratus
Sorry, asked the question the other way around. It should read:
Replacing ADFS Web Application proxy with f5
this seems to describe what you want:
https://devcentral.f5.com/articles/big-ip-and-adfs-part-2-ndash-ldquoapm-ndashan-alternative-to-the-adfs-proxy-rdquo
do you have APM?
- JimW_156953
Nimbostratus
Yes, we got APM.
then have a look at that link in my earlier post, it describes what you want i believe.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com