SSO between multiples domains and vs

hi,

You can use Multi-domain SSO but require to have only one APM Access profile for all VS.

You can also define F5 as SAML IDP and configure each Access profile as SP.

You can change the scope of your access profile. Here an extract from the APM Operation Guide :

In BIG-IP 11.x - 11.6, user session IDs are global to the BIG-IP system and can be presented to any BIG-IP APM
virtual server with an attached access profile.
In BIG-IP APM v. 12.0 and later, the configurable Profile Scope establishes additional criteria to ensure that a user
who has established a session on one virtual server or access profile cannot use that same session cookie to
access other virtual servers and the resources behind them.
There are three possible Profile Scope settings:
• Profile gives users access only to resources that are behind the same access profile on any virtual server.
(Default.)
• Virtual Server gives users access only to resources that are behind the same virtual server.
• Global gives users access to resources behind any access profile that has global scope. This setting is
equivalent to BIG-IP 11.x behavior.

Hope it helps

Yann