# \#oauth-2.0

**URL:** https://community.f5.com/tag/oauth-2-0/648.md

[Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md)

---

## [BIG-IP Oauth Client and AS](https://community.f5.com/t/big-ip-oauth-client-and-as/75788)

<div class="topic-metadata">

**Author:** [@rmNschguet](https://community.f5.com/u/rmNschguet)\
**Replies:** 2\
**Last updated:** [March 24, 2025, 9:55am UTC](https://community.f5.com/t/big-ip-oauth-client-and-as/75788 "2025-03-24T09:55:09Z")

</div>

Dear Community After days of troubleshooting im out of luck with my configuration. I’ve followed the following guides and documentation to configure two Virtual Server with APM (Client/RS and AS) on the same BIG-IP. …

---

## [WAF for APM Oauth Authorization VS](https://community.f5.com/t/waf-for-apm-oauth-authorization-vs/74271)

<div class="topic-metadata">

**Author:** [@Jonathan\_c](https://community.f5.com/u/Jonathan_c)\
**Replies:** 7\
**Last updated:** [October 9, 2024, 11:06pm UTC](https://community.f5.com/t/waf-for-apm-oauth-authorization-vs/74271 "2024-10-09T23:06:42Z")

</div>

Hi, We are testing the using of F5 as a OAuth Authorization Server and also a Resource Server. We have a WAF policy attached the VS representing of the Resource Server, which has an IIS server behind it. Since VS of t…

---

## [APM: OAUTH2 JWT Token with groups claim](https://community.f5.com/t/apm-oauth2-jwt-token-with-groups-claim/10820)

<div class="topic-metadata">

**Author:** [@Daniel\_W\_13795](https://community.f5.com/u/Daniel_W_13795)\
**Replies:** 25\
**Last updated:** [July 25, 2023, 4:29pm UTC](https://community.f5.com/t/apm-oauth2-jwt-token-with-groups-claim/10820 "2023-07-25T16:29:42Z")

</div>

Hello and happy new year :wink: We use APM as OAuth Authorization Server to create JWT token for apps. One of our customers wants to use the MicroProfile JWT(MP-JWT) for his application, that needs some specific claims:…

---

## [Request and validate OAuth / OIDC tokens with APM](https://community.f5.com/t/request-and-validate-oauth-oidc-tokens-with-apm/68836)

<div class="topic-metadata">

**Author:** [@Matt\_Dierick](https://community.f5.com/u/Matt_Dierick)\
**Replies:** 3\
**Last updated:** [May 29, 2023, 4:52pm UTC](https://community.f5.com/t/request-and-validate-oauth-oidc-tokens-with-apm/68836 "2023-05-29T16:52:27Z")

</div>

BIG-IP APM is able to request and validate OAuth2.0 and OpenID Connect tokens. It can act as Client, Resource Server and Authorization Server. In this article, I cover the use cases where APM acts as Resource Server (val…

---

## [Oauth 2.0 grant type for machine to machine](https://community.f5.com/t/oauth-2-0-grant-type-for-machine-to-machine/49621)

<div class="topic-metadata">

**Author:** [@Scott\_R](https://community.f5.com/u/Scott_R)\
**Replies:** 0\
**Last updated:** [June 21, 2021, 2:22pm UTC](https://community.f5.com/t/oauth-2-0-grant-type-for-machine-to-machine/49621 "2021-06-21T14:22:10Z")

</div>

Since it looks like APM doesn’t support the client credentials grant type, I’m curious what grant type folks are using for machine to machine communication. We make API calls to endpoints that don’t have a UI where a use…

---

## [Using OAuth2 to share access for 2 DataCenters](https://community.f5.com/t/using-oauth2-to-share-access-for-2-datacenters/34345)

<div class="topic-metadata">

**Author:** [@DarioGB\_339840](https://community.f5.com/u/DarioGB_339840)\
**Replies:** 1\
**Last updated:** [May 8, 2019, 11:11pm UTC](https://community.f5.com/t/using-oauth2-to-share-access-for-2-datacenters/34345 "2019-05-08T23:11:22Z")

</div>

Hello. I have two datacenters which serve the same app, masked by one APM device for authentication (using SSO to the backend) for each DC. When one DataCenter is down, all users that were using this DC start using…

---

## [Redirect-URI does not match with client app configuration](https://community.f5.com/t/redirect-uri-does-not-match-with-client-app-configuration/53359)

<div class="topic-metadata">

**Author:** [@Belanger\_Yves](https://community.f5.com/u/Belanger_Yves)\
**Replies:** 0\
**Last updated:** [April 1, 2019, 7:24pm UTC](https://community.f5.com/t/redirect-uri-does-not-match-with-client-app-configuration/53359 "2019-04-01T19:24:51Z")

</div>

In the Access \>\>Federation : OAuthorization Server : Client Application, We need to add the «Redirect URI(s)», but our client app redirect uri has a variable query string, the session ID. Like the session ID is different…

---

## [F5 APM as OAuth Authorization server and Resource server](https://community.f5.com/t/f5-apm-as-oauth-authorization-server-and-resource-server/54585)

<div class="topic-metadata">

**Author:** [@HarshaPotharaju](https://community.f5.com/u/HarshaPotharaju)\
**Replies:** 4\
**Last updated:** [March 21, 2019, 7:35pm UTC](https://community.f5.com/t/f5-apm-as-oauth-authorization-server-and-resource-server/54585 "2019-03-21T19:35:41Z")

</div>

I’m using F5 as both Authorization server and Resource server. Haven’t setup client server yet so it accepts any username and any password. When testing in postman, I can generate token and pass them via request heade…

---

## [APM policy with external logon page for authorization server](https://community.f5.com/t/apm-policy-with-external-logon-page-for-authorization-server/36933)

<div class="topic-metadata">

**Author:** [@omrit\_381141](https://community.f5.com/u/omrit_381141)\
**Replies:** 0\
**Last updated:** [February 20, 2019, 8:12pm UTC](https://community.f5.com/t/apm-policy-with-external-logon-page-for-authorization-server/36933 "2019-02-20T20:12:08Z")

</div>

Hi All, we are Using APM as an authorization server and an external logon page has been configured in the access policy. The external logon page is configured to capture the credentials and then posts it back to /my.p…

---

## [Big-IP v13.0.0 OAuth architecture](https://community.f5.com/t/big-ip-v13-0-0-oauth-architecture/42228)

<div class="topic-metadata">

**Author:** [@PK\_294685](https://community.f5.com/u/PK_294685)\
**Replies:** 0\
**Last updated:** [May 13, 2017, 1:27am UTC](https://community.f5.com/t/big-ip-v13-0-0-oauth-architecture/42228 "2017-05-13T01:27:57Z")

</div>

Can someone explain how OAuth works in F5? I know there are some articles on support site which is great, but i’m trying to understand the flow how each component communicate. (OAuth authorization Server, OAuth Client…
