Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Dennis_Andrade_'s avatar
Dennis_Andrade_
Icon for Nimbostratus rankNimbostratus
Oct 17, 2013

URL link inside pushlished application not working

We have a custom published application in the APM using SAML as an authentication method: application.company.com. The custom application is the Service provider. We have also setup the APM as the Id...
BIG-IP Access Policy Manager (APM)
deployment
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 17, 2013

In the APM I see that it creates a new session for each call to the web service as we have another virtual server for the web service using SAML as well.

 

Okay, so we've established that the web service call goes to another VIP and that the web service calls are failing. Correct? Can you look at client side captures and see what's happening between the client (browser) and the web service VIP? Does the initial request send an APM session cookie to the VIP? Does this request get redirected to the IdP or to /my.policy?