For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

EmBee_57573's avatar
EmBee_57573
Icon for Nimbostratus rankNimbostratus
Feb 26, 2014

SAML: APM as Service Provider (SP) role - is it possible to do SSO credential mapping to the backend server?

Hi I would like to setup the APM as Service Provider, having an external IdP. What I would like to do is pass the SAML token I receive, on to the backend server. The reason is that the SharePoint ser...
BIG-IP Access Policy Manager (APM)
deployment
design
microsoft
security
kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
Feb 26, 2014

Is your SharePoint federated with ADFS and are you running in claims mode? I have the F5 as a SP to SharePoint but I don't have ADFS. Realistically you might be looking to have F5 be an SP to ADFS depending on the flow of things and answer to some of the questions I put. Since this get some complex you should try to put a more detailed message about your environment and what you're trying to do. I have the following F5 SP that bounces to an F5 IdP (to pick up SSO from our dedicated SSO virtual server/apm) I have a virtual server for SharePoint that I put an access policy that does an SAML Auth (to the IdP) once it's authenticated against the IdP I take the information out of the SAML attributes put the the user name and pwd into the SSO session variables and do a SSO NTLM configuration to SharePoint. I'll post more details if this solution works for you.