For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_17748's avatar
Chris_17748
Icon for Nimbostratus rankNimbostratus
May 07, 2015

SAML and Access Policy Already in Session Not Being Caught

We are having a problem with SAML authentication and users starting a second session before they complete the first. When not using SAML this is caught and the Access Policy is already in Session er...
BIG-IP Access Policy Manager (APM)
design
saml
security
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
May 09, 2015

Possibly you can set a session variable in an iRule ACCESSION_STARTED and check this on HTTP_REQUEST before allowing a session. Might need to disable the APM iRule events to do this checking.