Forum Discussion

Matti's avatar
Matti
Icon for Nimbostratus rankNimbostratus
Mar 22, 2016

SAML iDP and per application choise of 1-factor or 2-factor auth.

I've setup an SAML iDP with F5 and it's working without issues, Running on 11.6 software.   In the setup there's an access profile that forces all clients to do two-factor authentication when auth...
BIG-IP Access Policy Manager (APM)
saml
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Mar 22, 2016

Hello,

 

In 11.6.0, You should define IDP cascade architecture.

 

2-factor SP -> IDP2f -> IDP1f

 

1-factor SP -> IDP1f

 

This way, you can manage every scenarios. For example, you can browse from a 1factor SP to a 2factor SP without any issue.

 

I think that providing attributes in the Authrequest is currently not available even in v12.0.0

 

  • Matti's avatar
    Matti
    Icon for Nimbostratus rankNimbostratus
    Mar 31, 2016
    Thanks. So it's as I thought and I've to create a new IDP as I outlined in the question as the last resort solution :(