Forum Discussion

arpydays's avatar
arpydays
Icon for Nimbostratus rankNimbostratus
Dec 10, 2015

SAML IDP issue

Hi,   I'm trying to understand the F5 IDP processing as I've run into a problem. I've setup an internal and external F5 IDP which has SP initiated auth from a cloud proxy for a user forward proxy ...
BIG-IP Access Policy Manager (APM)
security
arpydays's avatar
arpydays
Icon for Nimbostratus rankNimbostratus
Dec 11, 2015

Hi, only using single domain.

 

It appears to be related to multiple SAML requests during a session. I can simulate the issue by initially browsing to a site, SP redirects to F5 IDP and I get the login page, then I open another tab and browse to another site and get the login page again as part of a second SAML request, if I authenticate to this second page I get the failed connection and F5 then redirecting the second SAML POST (with the MRH cookie) back to the SSO url not my.policy. I don't see this on the internal IDP as the initial SAML request is authed using kerberos..