SSO

Hi beginner 😉,

1. Yes. Attaching the same APM policy to two virtual servers will result in SSO. So user is logged-in to VS 1 will result in SSO to the second.
2. It doesn't validate credentials, F5 is using an APM session cookie for this. Since the user has this cookie and an active session the second virtual server doesn't need valid credentials.

There are 3 options for this when you create a new policy/profile.

From the Profile Scope list, retain the default value or select another.

• • Profile: Gives a user access only to resources that are behind the same access profile. This is the default value.
  • Virtual Server: Gives a user access only to resources that are behind the same virtual server.
  • Global: Gives a user access to resources behind any access profile that has global scope.

"Since the user has this cookie and an active session the second virtual server doesn't need valid credentials."

Does that mean the cookie generated with first VS will be sent again to second VS and there wont be any validation. In that case anyone can insert a cookie to second VS right and get access to the servers right ?

thanks got clarified.

So when the second VS receives the connection with same cookie f5 will validate this cookie with APM session cookies right ?so the timeout value will be reset now by second VS?

1.so the cookie will be same for both VS.where can i find that specific cookie in APM that has been used between these VS?

2.when i open active sessions in APM and when i click the + sign i could see "No subsessions " what does that mean.

i want to see  whether same cookie is used for both VS via logs.How /where can i verify this?.

Note: i am not the end user..as this apm is very new to me i just want to see/verify the sso cookies (same cookie) that are used across VS.