Forum Discussion

Raghu-123_18616's avatar
Raghu-123_18616
Icon for Nimbostratus rankNimbostratus
Mar 10, 2015

REST API - Authentication

Scenario: f5 Big-IP APM is the IDP. Salesforce is the SP.

 

User accesses Salesforce after providing authentication information to f5.

 

User initiates a SharePoint search REST API call from the Salesforce platform.

 

SharePoint search REST API is exposed through the f5.

 

How do I pass the user credential established during initial sign on to f5 while accessing the SharePoint REST API?

 

Currently, the user is redirected to f5 login page to provide a user id and password.

 

Thanks,

 

Raghu

 

7 Replies

  • Is the Sharepoint API call on the same domain as the F5 login? If it's not, then the session cookie you should get from the initial F5 login will not be sent with the REST api call and the F5 won't know there's a valid session.

     

  • Thanks for the response.

     

    Currently the domains do not match. Can I access the session from the cookie and send this over? Could you let me know the name of the cookie that stores the session?

     

    Raghu

     

  • See SOL15387 for information on the APM cookies.

     

    You've got few options to get it working though.

     

    You could follow this article to handle sharing access cookies (or use the multi-domain authentication feature in APM (helpful information here)).

     

    Another option would be to set up a simple access policy for the sharepoint piece and use SAML auth to authenticate against your SAML IdP policy.

     

    There may be other options, but these I can think of off the top of my head.

     

    • Michael_Jenkins's avatar
      Michael_Jenkins
      Icon for Cirrostratus rankCirrostratus
      No problem. Don't forget to mark the answer as the solution if it works out for you. :)
  • Hi Michael,

     

    I am not able to access any of the cookies in Salesforce APEX Controller.

     

    Could I configure Salesforce as the IDP and SharePoint as the Service provider? Are there any settings on f5 to make this connnection work without further authentication?

     

    Basically we want to User credential and not a Service Account credential to access the search.

     

    Thanks,

     

    Raghu

     

    • Michael_Jenkins's avatar
      Michael_Jenkins
      Icon for Cirrostratus rankCirrostratus
      Is SharePoint set up to do authenticate through the F5 (federated or otherwise)?