Solution11 Policy¶
Policy Walk-Through¶
When a user accesses a VIP protected by this policy the user is redirected to the provider selected for authentication.
Upon successful Authentication, the user is granted access via the Allow Terminal
If unsuccessful, the user proceeds down the fallback branch and denied access via the Deny Terminal
Profile Settings¶
All profile settings are left the defaults
Supporting APM Objects¶
Provider¶
The settings below define all the components of the Authorization Server’s endpoints to retrieve and validate tokens.
JSON Web Token¶
The JWT setting define the the signing algorithms used by a provider with a set of jwks. This token was auto discovered from the Authorization server.
JWT Key¶
The key settings define a type of key and its properties. This JWK was auto discovered from the authorization server.
Unique BIG-IP settings¶
DNS Resolver¶
The properties section are default settings
The Forward Zones section forwards all request to a single DNS server.
The Policy from a user’s perspective¶
If the user attempts to access https://solution11.acme.com via a web browser they are redirected to the solution10 Authorization Server.
Once authenticated the user is redirected back to the solution11 website.
This solution is designed to be integrated with other Authorization Server based solutions.