F5 VE user login integration with Azure AD

[suraj3]

Currently, we have a local user created in F5 for authentication, now we want to integrate Azure AD for this purpose.

is there any article for that or any steps provided?

[Daniel_Wolf]

Hi @suraj3,

not sure what you are trying to achieve, there are two possibilities I guess.
Do you plan to switch from local users to remote authentication for administrative connections?
Or do you want to use Azure AD as SAML IdP for APM?

Option 1: using LDAP for administrative connections:

I think Azure AD does not support the LDAP protocol, therefore you cannot use it for TMUI/TMSH authentication.
However Azure Active Directory Domain Services (seems to be a different product) does support LDAPS (Tutorial: Configure secure LDAP for an Azure Active Directory Domain Services managed domain). 
Once this is setup you can use it for TMUI authentication (K11072: Configuring LDAP remote authentication for Active Directory). 

Option 2: using Azure AD for APM auth: there are plenty of resources available:

• WHITE PAPER: Easily Configure Secure Access to All Your Applications via Azure Active Directory
• devcentral: Azure Active Directory and BIG-IP APM Integration
• youtube: Azure integration with F5 APM in v16.0

KR
Daniel

[suraj3]

Hello Daniel,

 I am looking for tmsh authentication from Azure AD.

Thanks

[Daniel_Wolf]

As far as I know this is not supported.