Forum Discussion
NimbostratusWe have multiple URLs on same VS using SNI configurations. How to use one SP for all URLs comming to VP
Hi ,
F5 is using as both SP and IDP.
We have multiple URLs pointing to same virtual server. We want to use SAML for all those URLs.
SAML assertion variables will be identicle. So instead of creating multiple SPs / IDs can one SAML SP and SAML IP can handle all request coming from different hostname ? Is there a possibility that IDP or SP urls contains place holders for the URLs?
Or any other suggested way??
4 Replies
Yann_Desmarest_Nacreous
Hello,
Maybe you can assign a standard access profile with multidomain sso. Thus, you have to define an idp for that, let's call it idpsp. Your access policy do SAML authentication to the idp. So, in the workflow, you have sp -> idpsp (saml sp) -> idp (saml idp)
harsha_sharma_1Thanks for replying, if we go by single IDP approach then on every URL we have to bind some branding. So if user has add IDP url in favourite then our branding configurations will be gone. Is there a way to add SP / IP urls in place holder or using variables?
Yann_DesmarestCirrus
Hello,
Maybe you can assign a standard access profile with multidomain sso. Thus, you have to define an idp for that, let's call it idpsp. Your access policy do SAML authentication to the idp. So, in the workflow, you have sp -> idpsp (saml sp) -> idp (saml idp)
- harsha_sharma_1Thanks for replying, if we go by single IDP approach then on every URL we have to bind some branding. So if user has add IDP url in favourite then our branding configurations will be gone. Is there a way to add SP / IP urls in place holder or using variables?
