For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Phillips2's avatar
Chris_Phillips2
Icon for Nimbostratus rankNimbostratus
Apr 23, 2010

So, What about SAML2 and attribute release?

Been using F5's since the early 2000's and am in the identity side of the house, specifically around SAML2 and Federation aspects. While I understand that the APM cannot perform federation elements, ...
app sec
BIG-IP Access Policy Manager (APM)
security
Juerg_Wiesmann's avatar
Juerg_Wiesmann
Icon for Nimbostratus rankNimbostratus
Aug 19, 2010
Hi Chris,

 

 

Just got this Post. So I might be a bit late to answer.

 

No SAML is not on the supported feature list right now. Even I found a lot of need to support Federations. We see this more and more important. Insurance Companys for instance sell there Contracts through Agents. These Agents are selling different Solutions from different Insurance Companys. Thats why they built a "Organisation of Interest" called igB2B www.igb2b.ch to handle this interface. Sorry the Website is not in English.This organisation will also act as an IDP.

 

The more I think about this I think we might be able to read out SAML Tokens from the IDP and use the information out of it to allow / disallow access to objects or applications.

 

Would maybee need an iRule and APM aproach.

 

Kind Regards

 

Wiesmann