Forum Discussion

Micah_Haarbrink's avatar
Micah_Haarbrink
Icon for Nimbostratus rankNimbostratus
Jan 10, 2014

SAML Cookie Persistence after browser/system restart and across service providers

I am fairly new to the F5 world and in the beginning of setting up our LTM's as SAML IdP's for a variety of services. Our first use-case is Jive, which we have working and all the attributes are pul...
cookie
design
saml
security
SSO
Micah_Haarbrink's avatar
Micah_Haarbrink
Icon for Nimbostratus rankNimbostratus
Jan 21, 2014

For anyone curious, the response from F5 support is that cookie persistence is triggered in APM only when forwarding to a pool on the virtual server and the pool responds. Since we are configured as a SAML IdP the pool is really just a placeholder and there is nothing to respond. It was recommended we submit a feature request to add this in future updates so we're doing that.

 

In the meantime, they provided us with an iRule to cover the behavior and with that in place we are seeing the cookie persist beyond browser restarts and computer reboots.

 

  • Dizzle_79606's avatar
    Dizzle_79606
    Icon for Nimbostratus rankNimbostratus
    Apr 08, 2016
    Can you update me with a case number or post the Irule for further inspection. We are seeing this behavior in 11.6 with Secureauth and APM for lastmrh and saml cookies