# APM - Creation of IdP and SP for SAML **URL:** \ **Category:** Technical Forums\ **Tags:** big-ip-access-policy-manager-apm, application-delivery\ **Created:** [February 23, 2021, 12:33pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214 "2021-02-23T12:33:24Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 23, 2021, 12:33pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/1 "2021-02-23T12:33:24Z")
Hi guys! I am trying to configure IdP and SP on my BigIP. I have no idea about this. I have answered the questions in the iApp/Application Services. I have answered all the questions but on the “Which SaaS application are you using?” I don’t see my IdP as an option…just the Amazon and so on…pity! Do you have any clue where and especially how I configure the whole thing for IdP/SA, SAML ? thank you a million times! ---
**Author:** ![Daniel\_Wolf](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/daniel_wolf/32/1119_2.png) [@Daniel\_Wolf](https://community.f5.com/u/Daniel_Wolf)\ **Post date:** [February 23, 2021, 3:41pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/2 "2021-02-23T15:41:36Z")
Hi, maybe you should take one step at a time. Are you aware of the roles of IdP and SP in SAML? There are two parties involved in the process of SAML authentication, an identity provider (IdP) and a service provider (SP). IdP and SP mutually trust each other. The IdP performs the authentication (very often against some kind of User Directory like LDAP) and passes the user’s identity (as well as information about the users role, authorization, an so on) in the form of a SAML authentication token, to the SP. The SP processes the token and gives the user access to the service, very often some kind of SaaS. Which role should your BIG-IP take? The role of the IdP or the SP, both? KR Daniel ---
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 24, 2021, 1:49pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/3 "2021-02-24T13:49:39Z")
Both roles are relevant for BigIP. Thank you for paying attention, Daniel. ---
**Author:** ![Daniel\_Wolf](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/daniel_wolf/32/1119_2.png) [@Daniel\_Wolf](https://community.f5.com/u/Daniel_Wolf)\ **Post date:** [February 24, 2021, 2:56pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/4 "2021-02-24T14:56:58Z")
Ok, I guess you’re going through Guided Config and you get stuck there, right? Which BIG-IP version are you on? I will try go collect a couple of links to the appropriate documentation. I think to get a better understand and to use BIG-IP as SP und IdP a step-by-step guide might be a good starting point for you. Meanwhile check the Youtube channels of _devcentral_ and _Matthieu Dierick, F5_. There can find some videos to get you some rough idea. ---
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 24, 2021, 3:08pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/5 "2021-02-24T15:08:54Z")
LEt me see, I run the version : 13.1.3.4 ---
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 24, 2021, 3:19pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/6 "2021-02-24T15:19:47Z")
And thanks! ---
**Author:** ![Daniel\_Wolf](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/daniel_wolf/32/1119_2.png) [@Daniel\_Wolf](https://community.f5.com/u/Daniel_Wolf)\ **Post date:** [February 24, 2021, 5:34pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/7 "2021-02-24T17:34:13Z")
So check this out, for 13.1.3 there are two manuals with step by step guides and flowcharts how to configure APM as IdP and SP. Just follow these links: - [Using APM as a SAML Service Provider](https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-sso-13-1-0/32.html#guid-be2cf224-727e-4a0f-aa68-676fdedba37b) - [Using APM as a SAML IdP no SSO portal](https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-authentication-sso-13-1-0/31.html#guid-39ffed07-65f2-40b8-85ae-c80073cc4e82) I hope that these can provide you the guidance you need. ---
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 25, 2021, 8:20am UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/8 "2021-02-25T08:20:24Z")
Sure thing! Thanks! ---
**Author:** ![Sajid](https://avatars.discourse-cdn.com/v4/letter/s/779978/32.png) [@Sajid](https://community.f5.com/u/Sajid)\ **Post date:** [February 25, 2021, 1:31pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/9 "2021-02-25T13:31:46Z")
Few online F5 lab guides. [Lab 2: SAML Identity Provider (IdP) Lab¶](https://clouddocs.f5.com/training/community/iam/html/archived/class1/module2/module2.html) [2. Lab 1: SAML Service Provider (SP) Lab¶](https://clouddocs.f5.com/training/community/iam/html/class7/lab1.html) [Lab 1: SAML Service Provider (SP) Lab¶](https://clouddocs.f5.com/training/community/iam/html/archived/class1/module1/module1.html) F5 APM Training as well having full chapter for SAML config (F5 as SP and IdP). [F5 Community Training & Labs](https://clouddocs.f5.com/training/community/iam/html/) ---
**Author:** ![joyride\_us](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@joyride\_us](https://community.f5.com/u/joyride_us)\ **Post date:** [February 25, 2021, 1:47pm UTC](https://community.f5.com/t/apm-creation-of-idp-and-sp-for-saml/56214/10 "2021-02-25T13:47:55Z")
Thank you.