Forum Discussion

Andrea's avatar
Andrea
Icon for Nimbostratus rankNimbostratus
Sep 06, 2018

saml metadata file or samlresponse from the f5

Is it possible to edit the metadata file that you export from f5? We would like to edit the saml assertionconsumerservicelocation   " -https://testimsmvc.upmc.com/LoginExternal"; xmlns:ds="; xml...
application delivery
Azure
BIG-IP Access Policy Manager (APM)
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 07, 2018

Hi Andrea,

 

When you export metadata from your equipement, you export your current configuration. So if you modify ACS URL in the metadata then provide file configuration to your SP it will not working.

 

Because When client will process is saml response to "/NewURI/acs", he will respond to the wrong URL (because you will have changed) while F5 expects to receive its response on the URL "/saml/sp/profile/post/acs".

 

Second point. the binding supported by F5 is Artifact, PAOS and POST so Get is not possible unless you use an irule what I do not recommend.

 

To help you to find a solution I have to understand why you want to change your ACS URL and use a GET insteand a POST?

 

regards