For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DustinW's avatar
DustinW
Icon for Nimbostratus rankNimbostratus
Aug 15, 2019
Solved

TMSH/Bash command to check which SAML: BIG-IP as IdP profile is using a specific SSL certificate

I have multiple IdP profiles using the same SSL certificate. Is there a command I can run to list the IdP profiles associated to specific certificate.   This would be similar to running 'tmsh li...
  • JG's avatar
    JG
    Aug 16, 2019

    Would the following work for you:

    tmsh -q -c "cd /; list /apm sso saml recursive" | grep -E '(idp-certificate|saml-profiles)'

    ?

JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Aug 15, 2019
tmsh -q -c "cd /; list /apm sso saml idp-certificate | grep cert

 Or something like this.

[Edited]

DustinW's avatar
DustinW
Icon for Nimbostratus rankNimbostratus
Aug 15, 2019

Thanks for above but this does't seem to do what I require..

The above shows which LTM SSL profile the certificate is bound to but doesn't specify the APM Access Policy  ››  SAML : BIG-IP as IdP profile/s related to the certificate name.

Anymore ideas?

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Aug 15, 2019

    Edited answer above.