For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stefan_Klotz_85's avatar
Stefan_Klotz_85
Icon for Cirrus rankCirrus
Sep 04, 2015

SSO with different subdomain and APM 10.2.4

We are running an APM on 10.2.4 and an upgrade to version 11 is not an option right now. We configured it for OWA and this working fine. Now we want to extend the OWA functionality with the Enterpris...
BIG-IP Access Policy Manager (APM)
deployment
security
Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Sep 10, 2015

I found the Share Access Cookies article and tried to adjust it based on our setup, especially as we only use ONE virtual server, so no redirection is required. We only need to adjust the MRHSession cookie to be valid for all subdomains, meaning ".company.com". Additionally the EV-servers are using a different SSO method than OWA, so I tried to fix this with the "WEBSSO::select"-command for the appropriate request, but this doesn't seem to trigger. Anyone an idea how to solve this issue, maybe also with some workarounds? Thank you!

 

Ciao Stefan :)