For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JimT's avatar
JimT
Icon for Nimbostratus rankNimbostratus
Sep 22, 2015

SSO Sharepoint

Hi,

 

I hope someone here can point me in the right direction :-)

 

We have setup a Sharepoint site and using SAML auth. BIG-IP acts as both IdP and SP. Everything is working when I hit the Sharepoint url (test1.example.com). I get redirected to the IdP and back to SP and logged in.

 

The problem is that there are several images on this landing page that refrences another Sharepoint url (test2.example.com) and they are not showing correctly. This site, test2.example.com is also using the same IdP/SP setup.

 

I can see from httpwatch that I get NS_ERROR_NET_RESET when test1.example.com tries to get the image. There is also another link on test1.example.com that points to test2.example.com, and if I hit that link I get redirected to test2.example.com, logged in by SSO, hit the back button, and all images on test1.example.com shows up correctly.

 

Same as above but I go to test2.example.com first, logs in and then go back to test1.example.com, all is good, and images shows up as it should.

 

Hope someone have an idea and can point me in the right direction.

 

BR Jim

 

BIG-IP Access Policy Manager (APM)
deployment
microsoft
security

1 Reply

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Mar 28, 2016
    Hello, I think you are targeting an APM limitation that do not allow establishing more than one APM session at the same time. You have probably your 1st request for test1.example.com that start the authentication workflow on your SP and IDP VS, then you have a request to the same IDP but with another authrequest from test2.example.com before the authentication process complete on test1.example.com