Forum Discussion

CDG's avatar
CDG
Icon for Nimbostratus rankNimbostratus
Apr 20, 2016

SAML SP-initiated no redirection

I have setup a BigIP as IdP (SSO Portal) when we do a SP-initiated connection the redirection to the SP after AD auth is not happening. IDP-Initiated works properly from a Webtop/SAML Resource   T...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
CDG's avatar
CDG
Icon for Nimbostratus rankNimbostratus
Apr 26, 2016

SP-initiated was not working because there was an error in the configuration of the SP Connector.

 

From the SP metadata...the service provider configured the use=signing and use=encryption with a certificate.

 

The APM was expecting the SP to include a signature in their AuthN Request for SP-Initiated connections but that was not the case. Modifying the SAML SP Connector/Security Settings/ "Will be signed" from yes to no fixed the problem.

 

  • f5learn_164388's avatar
    f5learn_164388
    Icon for Nimbostratus rankNimbostratus
    Jun 09, 2016
    Thank you so much for posting this. We were able to fix similar issue we ran into.