Forum Discussion

Jason0's avatar
Jason0
Icon for Nimbostratus rankNimbostratus
Jun 14, 2017

SAML Federation

Is it possible to setup a SAML configuration where one Big-IP is both IdP and SP?

 

APM
application delivery

1 Reply

Sort By
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jun 14, 2017

    Technically, I don't see why not. You could authenticate the user, give him an assertion, and this user could use the assertion to connect to another service in this same unit.

     

    So, my assumption is yes, it does support having both in the same unit.

     

    I could not find any information in the documentation that says you can't do that.

     

    Here is the solution about SMAL 2.0:

     

    https://support.f5.com/csp/article/K16497