Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Chris_Phillips2's avatar
Chris_Phillips2
Icon for Nimbostratus rankNimbostratus
16 years ago

So, What about SAML2 and attribute release?

Been using F5's since the early 2000's and am in the identity side of the house, specifically around SAML2 and Federation aspects. While I understand that the APM cannot perform federation elements, ...
app sec
BIG-IP Access Policy Manager (APM)
security
Chris_Phillips2's avatar
Chris_Phillips2
Icon for Nimbostratus rankNimbostratus
15 years ago
Sorry 'N', I agree, no response either.

 

Collapsing down to just APM from my perspective is a bit short sighted as there is a lot more involved in dealing with attribute release (e.g. retrieve them over an XML SAML2 response.

 

 

It would kick ass if the APM environment could respond to downstream services requests either through stuffing attributes in the header OR responding to SAML2 requests for attributes for an approved APM session.

 

 

It seems like a half solution to just use APM so far.