Sharing User Credentials Between SAML IDP and SP Policies in F5 APM

  Use Case In an F5 Access Policy Manager (APM) deployment with one Identity Provider (IDP) and multiple Service Providers (SPs), it’s often necessary for an SP policy to access user credentials (e...
Published Apr 06, 2025
Version 1.0
APM
saml
SSO
Injeyan_Kostas's avatar
Icon for Nacreous rankNacreous
I was first introduced to F5 technology in 2018. Coming from a primarily Layer 3 & 4 background, it was a mind blowing experience and love at first sight. Since then, I've been following the DevCentral community, initially just reading with a business account. Now, feeling more confident in my knowledge, I'm eager to contribute and help others solve challenges, just like others have helped me. Of course, the learning never stops, I'm still growing every day thanks to the insights shared by more experienced and smarter members of the community.
View Profile
Lohit's avatar
Lohit
Icon for Nimbostratus rankNimbostratus
May 19, 2025

Is this applicable to F5 LTM as well or is this only specific to F5 APM?

  • Injeyan_Kostas's avatar
    Injeyan_Kostas
    Icon for Nacreous rankNacreous
    May 19, 2025

    This is actually intended to enable user credential-based SSO within SAML SP policies — which, by default, is a feature of APM.

    LTM, on the other hand, doesn't provide access management capabilities, so I'm not sure how such an approach would work in that context.

    Did you have a specific use case or scenario in mind?