Forum Discussion

harsha_sharma_1's avatar
harsha_sharma_1
Icon for Nimbostratus rankNimbostratus
May 17, 2016

We have multiple URLs on same VS using SNI configurations. How to use one SP for all URLs comming to VP

Hi ,   F5 is using as both SP and IDP.   We have multiple URLs pointing to same virtual server. We want to use SAML for all those URLs.   SAML assertion variables will be identicle. So inst...
application delivery
BIG-IP Access Policy Manager (APM)
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 17, 2016

Hello,

 

Maybe you can assign a standard access profile with multidomain sso. Thus, you have to define an idp for that, let's call it idpsp. Your access policy do SAML authentication to the idp. So, in the workflow, you have sp -> idpsp (saml sp) -> idp (saml idp)

 

  • harsha_sharma_1's avatar
    harsha_sharma_1
    Icon for Nimbostratus rankNimbostratus
    May 17, 2016
    Thanks for replying, if we go by single IDP approach then on every URL we have to bind some branding. So if user has add IDP url in favourite then our branding configurations will be gone. Is there a way to add SP / IP urls in place holder or using variables?