SAML server SSO

Hi, F5 v12.1.2 works well as SAML SP, but I am not sure how to handle server SSO (so server does not ask user for credentials.)

 

I understood from other posts, that F5 has to act as IdP for frontend server to handle server SSO which is SP (standard server SSO methods like form based/basic/ntlm cannot be used as F5 has no password).

 

So should I just create SAML IdP config with some dummy IdP Entity ID (URL) and then use it in SSO configuration + insert box "SSO Credential Mapping" in VPE and configure web frontend to use F5 as SAML IdP?

 

I guess I need to forward some attributes to web frontend, but I'll hopefully sort out in IdP configuration.

 

Thanks Zdenek