For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stefan_Klotz_85's avatar
Stefan_Klotz_85
Icon for Cirrus rankCirrus
Sep 04, 2015

SSO with different subdomain and APM 10.2.4

We are running an APM on 10.2.4 and an upgrade to version 11 is not an option right now. We configured it for OWA and this working fine. Now we want to extend the OWA functionality with the Enterpris...
BIG-IP Access Policy Manager (APM)
deployment
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 10, 2015

Hi,

owa.company.com, ev1.company.com and ev1.company.com are in different subdomain but in the same : company.com (without dot at the beginning)

if you change SSO domain to company.com, every fqdn in company.com will share MHR session.

to change SSO profile based on hostname, you can use :

when ACCESS_ACL_ALLOWED {
    switch [string tolower [HTTP::host]] {
        "ev1.company.com" {WEBSSO::select Basic}
        "ev2.company.com" {WEBSSO::select Form-ev2}
    }
}