Forum Discussion

FI_2016_187929's avatar
FI_2016_187929
Icon for Nimbostratus rankNimbostratus
Mar 06, 2015

SAML SSO Using Logged In Windows Credentials

Trying to configure our F5 hosted IdP to authenticate clients using their logged in Windows credentials. The SP is an external vendor, we do not need to use Kerberos to authenticate to the applicati...
BIG-IP Access Policy Manager (APM)
saml
security
SSO
kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
Mar 08, 2015

May be good to note this

 

https://support.f5.com/kb/en-us/solutions/public/16000/000/sol16056.html

 

Try enabling debug for SAML SSO under IdP configuration under general settings.

 

Regarding the password prompt do you see this in a new browser session? Typically only upon 401 request the browser send the authentication header.

 

If the first HTTP request to APM goes with authentication header, user will see the password prompt, for which work around is possible.