Forum Discussion

Rabbit23_116296's avatar
Rabbit23_116296
Icon for Nimbostratus rankNimbostratus
Jan 23, 2014

SSO options - NTLM integrated SAML assertions

I am trying to use NTLM pre-authentication for SAML assertions. To conceptualize:   use external logon page in F5 that points to a web service instead of a form the web service authenticates pa...
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Feb 25, 2014

Rabbit23 - I read over your solution that you posted on wordpress, but am a bit confused at the workflow. If I understood it correctly, you've setup an IIS site that will authenticate the user via NTLM and then will send an "assertion" to the APM, which will have to verify it via the symmetric encryption key that is set and allow user to proceed if the verification is successful.

 

If I understood that right, is there a reason why you are not just using NTLM authentication on the BIG-IP itself to achieve the same?