For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

edgoad_211171's avatar
edgoad_211171
Icon for Nimbostratus rankNimbostratus
Sep 17, 2015

SP-Initated SAML redirects to webtop?

I have a policy setup with 2 SAML resources. IDP-Initiated connections for both work fine. SP-Initiated however is giving me a headache.   The first resource is working properly with SP-Initiated ...
BIG-IP Access Policy Manager (APM)
cloud
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Sep 18, 2015

Hard to say, but most likely there is a mismatch on the SAML configuration side somewhere - maybe SP, maybe the IDP.

 

For starters, since you say that you have two SPs, I suggest performing HTTPWatch or similar and checking if the URLs that SPs use to initiate the connection to the IDP are identical - if not, you might have a configuration mismatch on the SP side.

 

Start by checking that first. You can also enable SSO debug log and see if there are any notices/errors reported there

 

Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Sep 18, 2015
I am glad my suggestion was in the right direction. Not knowing details of resource2, I am guessing that SAML configuration on resource 2 side is mess up - please review it.