Table of Contents
Introduction
Starting with F5 BIG-IP Access Policy Manager v16.1, users are now able to select Conditional Access Policies created at Microsoft EntraID (Previously called AzureAD) and simplify this integration.
Conditional Access policies at their simplest are if-then statements, those if statements can be based on users, identities or applications.
For more details on conditions and actions at Microsoft EntraID (Previously called AzureAD), please refer to Microsoft Entra Conditional Access: Zero Trust Policy Engine - Microsoft Entra ID | Microsoft Learn
This article is based on a great demo created by @Matt_Dierick
Configurations summary
Below is a summary of the configurations steps to follow,
1- Configure Conditional Access policiy at Microsoft EntraID (Previously called AzureAD), for more information on this part please follow the following link, Build Conditional Access policies in Microsoft Entra - Microsoft Entra ID | Microsoft Learn
2- Use F5 BIG-IP APM guided configurations to integrate with Azure AD.
3- You will see the configuration item to integrate with the conditional access.
4- This section will allow us to select the required conditional access policies created, and now you have the full policy flow managable through your BIG-IP APM dashboard.
