For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

BIG-IP iRulesLX FakeADFS - WS-Federation/SAML11

Details This was created as a solution to REPLACE the need for AD FS to tie APM into SharePoint.  The goal was originally to demonstrate the flexibility of iRulesLX and also to find a way to add WS-...
Published Jan 05, 2017
Version 1.0
application delivery
BIG-IP Access Policy Manager (APM)
federal
iRulesLX
saml
security
ws-fed
MichaelatF5's avatar
MichaelatF5
Icon for Employee rankEmployee
Jan 20, 2017

I use ACCESS_POLICY_AGENT_EVENT so that an irule event agent can fire the specific event needed, and also allow other evaluations to happen in the APM policy before ACCESS_POLICY_COMPLETED. Also, ILX is not integrated into APM, so if you want to add logging events and other agents after generating the WS-Fed token you have more visibility.

 

Also, the plan is to eventually combine with a few other IDAM projects so that you can use ACCESS_POLICY_AGENT_EVENT so that it would be possible to just call out different functions within irulesLX.

 

This is also just an example proof of concept.