Forum Discussion

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Feb 18, 2014

Using ADFS as an SP and F5 as IdP

We are trying to set up Sharepoint 2013 with our new F5 appliance, and wanting to use federation for authentication. I know that F5 doesn't support WS-Federation, so we need to add ADFS into the mix.

 

Now what we need to do is set up Sharepoint to use ADFS for authentication, but have ADFS act a proxy/translator and use the F5 as an IdP to do the real authentication. I haven't been able to find any solid information on how to make this happen.

 

I'm relatively new to federation, so my experience is pretty limited. Has anyone done this and/or could you help guide me in the right direction on how to get it set up (and how to test it)?

 

Thanks!

 

3 Replies

  • Jangins101, message me directly and I'll share a configuration document for "SP-initiated" configuration of APM/ADFS/SharePoint. The details are more lengthy than I think this thread would allow.

     

  • What is your user case for federation? You don't necessarily need to do claims to Sharepoint - you can setup APM to do SP-based SAML authentication and then setup Sharepoint 2013 to do Kerberos and setup Kerberos Constrained Delegation between APM and Sharepoint. Here's a link to guide on how to setup Sharepoint 2013 for Kerberos: http://blog.blksthl.com/2012/09/26/the-first-kerberos-guide-for-sharepoint-2013-technicians/

     

  • Did you ever get information regarding this request? I am exploring something very similar and would love to hear what you solution was.