Forum Discussion

Andrew_Husking's avatar
Andrew_Husking
Icon for Cirrus rankCirrus
Jul 28, 2014

SSO from APM enabled LTM VIP to APM enabled webtop VIP

Hi guys,

 

We have SSO credential sharing enabled between most of our APM policies and it is working rather well for us with the exception of one scenario.

 

If a user goes to a system like OWA or any other system that has a pool in the back-end and then goes to a system that has no pool in the back-end, but instead should show an APM webtop, they are presented with a blank/broken page.

 

Has anyone tried this before, or does anyone know of a way to be able to switch between the different APM policies without any issues? While i understand it would be ideal for us to tell users to always go to the portal site first, this isn't something that we can realistically achieve and we don't want to force them to re-authenticate.

 

Cheers

 

BIG-IP Access Policy Manager (APM)
security
SSO
webtop

2 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Jul 28, 2014

    Do you have different APM policies for OWA and webtop? What SSO type are you using between both? Enable websso debug might help you give more information on failure point

     

  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Jan 28, 2015

    I'm looking to do the same thing. We normally only need to operate in LTM+APM_Mode but I need to occasionally establish an App tunnel for a few users. Since Web Tops require a concurrent license, I don't want to run in this mode by default.

     

    Did you ever find a solution to this question?