Solution7: Inline SAML with Kerberos sideband

This solution documents all the necessary pieces required to create a set of APM policies that updates the AD lastlogontimestamp when only using SAML.

Keywords: saml, kerberos, ad, active, directory, idp, sp, chaining, inline

DC: single, multi



The link below only works from the UDF blueprint

Configuration Comments

UDF Deployment Models

BIG-IP Version

Blueprint Version



BIG-IP Components used:

  • Virtual Server

    • HTTP Profile

    • Client-side SSL Profile

    • Access Profile(s)

      • SAML SP Service

      • SAML IDP Connector

      • SAML IDP Service

      • SAML SP Connector

      • AAA Active Directory

      • Kerberos SSO