Forum Discussion
Raghu-123_18616
Nimbostratus
NimbostratusSSO with Salesforce using Big-IP APM
Current configuration: Big-IP APM is configured as an IDP to control access and SSO into Salesforce.
Could Big-IP APM be configured to recognize a user's login into Windows (Active Directory)? ...
Yes, this should be possible. You would need to use a Kerberos AAA config to authenticate users that are using domain-attached workstations or laptops. This is one guide that describes the process: https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-single-sign-on-11-6-0/9.htmlconceptid
Depending on your access requirements, you may wish to use a separate VS for "internal" users if you are running any other services for external use. The Kerberos process can fall back on HTTP Basic authentication, but to me, that looks a tad ugly if I can use a Logon page instead.
