For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Neeharika_Redd1's avatar
Neeharika_Redd1
Icon for Nimbostratus rankNimbostratus
Nov 13, 2014

SAML Auth with logon page

Hi,   We are planning to implement a SAML auth setup for our application on APM where F5 acts as SAML SP and Okta acts as external IDP. I have set up an access policy like Start-->SAML Auth --> On...
BIG-IP Access Policy Manager (APM)
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Nov 14, 2014

Hello,

 

The normal way is to prompt credentials to the user on the IDP only. Then, the IDP can forward creds within a secured (encrypted) SAML assertion.

 

I think that the expected scenario you described is more or less unsecure.

 

But you are free to implement your way