Forum Discussion

Scholtes_206508's avatar
Scholtes_206508
Icon for Nimbostratus rankNimbostratus
Jan 27, 2016

VS for Remote Access not able to Talk to VS for SAML SSO

We have a virtual server that provides employees with access to a VPN solution. If a user is connected to the VPN, they can not access the VS that runs the SAML SSO configurations. They can ping th...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
Daniel_W_'s avatar
Daniel_W_
Icon for Cirrus rankCirrus
Feb 02, 2016

I had the same issue. Found out that you need to attach the SAML ressources on the VPN access profile. When your users hit the SSO vs, APM discovers the already authenticated sessions and checks if there is a SAML SSO ressource attached to this user. When there is not SAML ressource allowed, APM sends a TCP RST as it would do on your SAML IDP VS, when you don't apply the SAML ressource to the user.