Forum Discussion

Neeharika_Redd1's avatar
Neeharika_Redd1
Icon for Nimbostratus rankNimbostratus
Nov 13, 2014

SAML Auth with logon page

Hi,   We are planning to implement a SAML auth setup for our application on APM where F5 acts as SAML SP and Okta acts as external IDP. I have set up an access policy like Start-->SAML Auth --> On...
BIG-IP Access Policy Manager (APM)
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Nov 13, 2014

Hello,

 

You can't pass attributes in SAMLRequest. You can do it only for SAML Assertion from IDP to SP.

 

If you insert a logon page before SAML Auth, it should be to achieve the process of IDP discovery ("Bindings" in APM). For example, you can prompt the user to set it's email address so that you can redirect the user to the IDP he belongs to by processing the domain part of the email.

 

Yann