23-Feb-2021 04:33
Hi guys!
I am trying to configure IdP and SP on my BigIP. I have no idea about this.
I have answered the questions in the iApp/Application Services. I have answered all the questions but on the "Which SaaS application are you using?" I don't see my IdP as an option...just the Amazon and so on...pity!
Do you have any clue where and especially how I configure the whole thing for IdP/SA, SAML ?
thank you a million times!
23-Feb-2021 07:41
Hi,
maybe you should take one step at a time. Are you aware of the roles of IdP and SP in SAML?
There are two parties involved in the process of SAML authentication, an identity provider (IdP) and a service provider (SP). IdP and SP mutually trust each other.
The IdP performs the authentication (very often against some kind of User Directory like LDAP) and passes the user's identity (as well as information about the users role, authorization, an so on) in the form of a SAML authentication token, to the SP.
The SP processes the token and gives the user access to the service, very often some kind of SaaS.
Which role should your BIG-IP take? The role of the IdP or the SP, both?
KR
Daniel
24-Feb-2021 05:49
Both roles are relevant for BigIP. Thank you for paying attention, Daniel.
24-Feb-2021 06:56
Ok, I guess you're going through Guided Config and you get stuck there, right?
Which BIG-IP version are you on? I will try go collect a couple of links to the appropriate documentation. I think to get a better understand and to use BIG-IP as SP und IdP a step-by-step guide might be a good starting point for you.
Meanwhile check the Youtube channels of devcentral and Matthieu Dierick, F5. There can find some videos to get you some rough idea.
24-Feb-2021 07:08
LEt me see, I run the version : 13.1.3.4
24-Feb-2021 07:19
And thanks!
24-Feb-2021 09:34
So check this out, for 13.1.3 there are two manuals with step by step guides and flowcharts how to configure APM as IdP and SP. Just follow these links:
I hope that these can provide you the guidance you need.
25-Feb-2021 00:20
Sure thing! Thanks!
25-Feb-2021 05:31
Few online F5 lab guides.
Lab 2: SAML Identity Provider (IdP) Lab¶
2. Lab 1: SAML Service Provider (SP) Lab¶
Lab 1: SAML Service Provider (SP) Lab¶
F5 APM Training as well having full chapter for SAML config (F5 as SP and IdP).
25-Feb-2021 05:47
Thank you.