Single Logout Request URL
We have setup the F5 APM to act as an IdP for Citrix Sharefile and have Single Sign On working. However when we create the IdP SAML and setup the external SP it created Single Logout Request and Response URLs as well. saml/sp/profile/post/sls and saml/sp/profile/post/slr If we set the logout URL on Sharefile to the saml/sp/profile/post/sls it posts to that URL, but gets a 404 as it doesn't look like the APM is setup to service that url. And it doesn't do anything on the APM side to invalidate the assertion for the user so if they go back to the Sharefile login it uses the previous SAML assertion (sends them to the F5 login page and since that user still has a valid assertion it sends it back to sharefile and logs them in). How do we remove the assertion on clicking logout from Sharefile?Guidance setting up a DMZ proxy for Citrix ShareFile
I am looking into setting up our F5 as the DMZ proxy for Citrix ShareFile. I have seen some discussions about some setting it up as an SAML IdP, (with issues with SLO). Is an IdP necessary as part of the proxy for ShareFile? Does anyone else have experience using F5 APM with ShareFile or can point to some F5 documentation for this? Thanks in advance for your help,