For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

CX_280703's avatar
CX_280703
Icon for Nimbostratus rankNimbostratus
Jul 21, 2016
Solved

Using TMSH for new SAML setup in APM (IdP)

Hi All,   I had a question around using TMSH, In my APM environment I have several IdP SAML solutions setup and working well, I have all the Vips and rules working etc.   My question is, can I ...
BIG-IP Access Policy Manager (APM)
cloud
security
TMSH
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Jul 21, 2016

    Everything in APM that can be configured on the GUI can be also configured with TMSH, with at least one exception: Customization content.

     

    I'm not sure exactly how you have your SAML set up, but if it requires Policy Objects with customization data then you'll have to do some fiddling outside of TMSH to make it work. Note that customization data isn't necessarily custom, it could just be the default templates. Some types of objects require these and others don't.

     

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Jul 21, 2016

Everything in APM that can be configured on the GUI can be also configured with TMSH, with at least one exception: Customization content.

 

I'm not sure exactly how you have your SAML set up, but if it requires Policy Objects with customization data then you'll have to do some fiddling outside of TMSH to make it work. Note that customization data isn't necessarily custom, it could just be the default templates. Some types of objects require these and others don't.

 

CX_280703's avatar
CX_280703
Icon for Nimbostratus rankNimbostratus
Jul 22, 2016

Thanks Lucas, Generally I will be doing standard changes so nothing customizable. I just want to be able to make future changes via the tmsh.

 

Do you know where too find examples of these commands? Not just what commands are available but actual example commands?