Forum Discussion

Cri's avatar
Cri
Icon for Nimbostratus rankNimbostratus
May 11, 2016

SAML BigIp as SP: forcing AssertionConsumerService

Hi all.

 

I configured BigIP as SP in an SAML 2.0 Federation with an external IdP using custom mode. I exported my metadata and I sent it to the Idp but they are refusing my metadata because of there is no AssertionConsumerService specified in it (they need at least one attribute specified). In the external IdP Connector > Assertion settings I specified as Identity Location "Attribute" and in Identity Location Attribute I configured an attribute name that I found in the IdP Metadata but the result is that in my metadata no attribute is specified as mandatory.

 

Anyone know where or what is wrong in my configuration?

 

BIG-IP Access Policy Manager (APM)
security

1 Reply

  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    May 11, 2016

    Cri,

     

    What version of BIG-IP are you using? APM SP metadata export most definitely includes ACS. Can you post a screenshot of your SP configuration General Settings screen? If running v12.0 or higher and if your Entity ID is not a URL format, you need to have SP Name Settings section filled out with the hostname of the SP Virtual so it can be used to form ACS value.