Forum Discussion

kj07208_118528's avatar
kj07208_118528
Icon for Cirrus rankCirrus
Oct 16, 2013

SAML IdP - Can you have one APM support multiple SAML IdPs?

We have setup one vip and one APM that we want to use for all SAAS logins. We are currently federating with about four saas cloud vendors (Salesforce, box, and others). I don't want to create mult...
BIG-IP Access Policy Manager (APM)
f5 apm
idp
saml
security
  • travis99_94012's avatar
    travis99_94012
    Oct 17, 2013

    Yes, you can have multiple IdPs setup for one virtual server. We have 3 right now. In the access policy, after authentication, I have one webtop and the 3 SAML resources. Works just fine SP initiated.

     

travis99_94012's avatar
travis99_94012
Icon for Cirrus rankCirrus
Oct 17, 2013

You shouldn't need rewrite on a SAML only virtual, just the access profile. The cool thing you can do though is setup a rewrite portal on another virtual, have your users login there and give them SAML resources, internal resources via links, Citrix (if you have it), SSL VPN (if you want to use it), View (again, if you have it), etc. Then they're logging in once and getting access to their resources.