For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

John_Reddington's avatar
John_Reddington
Icon for Nimbostratus rankNimbostratus
Jul 22, 2014

Seamless athentication to Webtop

Is it possible to authenticate to a webtop seamlessly using the AD credentials our users are already logged onto their machines with?   To qualify, we have a webtop, that when accessed, presents u...
BIG-IP Access Policy Manager (APM)
deployment
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 28, 2014

That would be sort of a dual authentication thing I think, albeit still transparent. You're going to log in to the APM webtop seamlessly by virtue of Kerberos authentication from your domain-joind workstation. The webtop can have links that point to SAML-based resources that will redirect to an IdP that also does seamless authentication via Kerberos and passes back a valid SAML assertion. This should definitely work. You could also technically perform the IdP functions in APM so that the links either send an IdP-initiated request to the application, or the SAMLRequest from the resource comes back to APM and is auto-authenticated by virtue of the existing session.

 

Related Content