Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
Dec 02, 2013

SAML and signing the whole message

I'm trying to federate with a Saas, which we are using SAML 2.0. They require the SAML response message have a signature. Currently I think that F5 only signs the assertions. Is there a way for the w...
deployment
security
wonsoo_41223's avatar
wonsoo_41223
Historic F5 Account
Dec 09, 2013

The feature is added from v11.4.1, but the option is not integrated in GUI. It can be enabled with tmsh command.

 

tmsh modify apm sso saml-sp-connector test-sp want_response_signed true

 

tmsh save sys config

 

  • kj07208_118528's avatar
    kj07208_118528
    Icon for Cirrus rankCirrus
    Dec 12, 2013
    Thanks - Time to upgrade again!
  • AlgebraicMirror's avatar
    AlgebraicMirror
    Icon for Altostratus rankAltostratus
    Jul 21, 2015
    Thank you! I just had this same problem, and this answered it. I guess it is still not surfaced in the GUI even in 11.5.3, but it is in TMSH.