Lab 2: ADFS Proxy using ADFS Authentication

Task 1 - Setup Lab Environment

To access your dedicated student lab environment, you will require a web browser and Remote Desktop Protocol (RDP) client software. The web browser will be used to access the Lab Training Portal. The RDP client will be used to connect to the Jump Host, where you will be able to access the BIG-IP management interfaces (HTTPS, SSH).

1. Click DEPLOYMENT located on the top left corner to display the environment

2. Click ACCESS next to jumpohost.f5lab.local

   

3. Select your RDP resolution.

4. The RDP client on your local host establishes a RDP connection to the Jumphost.

5. Login with the following credentials:

   • User: f5lab\user1
   • Password: user1

6. After successful logon the Chrome browser will auto launch opening the site https://portal.f5lab.local. This process usually takes 30 seconds after logon.

7. Click the Classes tab at the top of the page.

   

8. Scroll down the page until you see 203 Microsoft Integrations on the left

   

9. Hover over tile ADFS Proxy using ADFS Authentication. A start and stop icon should appear within the tile. Click the Play Button to start the automation to build the environment

10. The screen should refresh displaying the progress of the automation within 30 seconds. Scroll to the bottom of the automation workflow to ensure all requests succeeded. If you experience errors try running the automation a second time or open an issue on the Access Labs Repo.

    

Task 2 - Access the Microsoft ADFS guided configuration

1. From the jumphost browser navigate to https://bigip1.f5lab.local

2. Login with the following credentials:

   • username admin
   • password admin

3. Click on the Access tab located on the left side.

   

4. Click Guided Configuration

   

5. Click Microsoft Integration

   

6. Click ADFS Proxy

   

7. Click Next

   

Task 3 - ADFS Proxy Settings

1. Enter the Configuration Name ADFS_PROXY

2. Enter the ADFS FQDN adfs.acme.com

3. Select the Authenticatin Method ADFS Authentication

4. Click Save & Next

   

Task 4 - Virtual Server Properties

1. Enter the Destination Address 10.1.10.101

2. Select the Client SSL Certificate acme.com-wildcard

3. Select the Associated Private Key acme.com-wilcard

4. From the Trusted Certificate Authorities for Client Authentication dropdown select ca.f5lab.local

5. Click Save & Next

   

Task 5 - ADFS Server Pool Properties

1. Enter the IP address 10.1.20.13

2. Click Save & Next

   

Task 6 - Summary

1. Click Deploy

   

2. Click Establish Trust

   

3. Enter the Username admin

4. Enter the Password admin

5. Click Establish Trust

   

6. A certificate appears under the Establish Trust section signifying the trust was successfully established.

7. Click Finish

   

8. The configuration has been successfully deployed

   

Task 7 - Test username and password Authenticaiton

1. On the jumphost open a webbrowser and navigate to https://sp.acme.com. You will redirected to https://adfs.acme.com

2. Enter the username user1@f5lab.local

3. Enter the password user1

4. Click Sign in

   

5. After successful login at ADFS you redirected to http://sp.acme.com

   

Task 8 - Test Certificate authentication

1. Close the browser completely from the previous test or open a new tab in ingonito(private) view

2. On the jumphost open a webbrowser and navigate to https://sp.acme.com. You will redirected to https://adfs.acme.com

3. Select Sign in using an X.509 Certificate

   

4. Select the user1 certificate

5. Click OK

   

6. After successful login at ADFS you redirected to http://sp.acme.com

   

Task 9 - Lab Cleanup

1. From the jumphost browser navigate to https://bigip1.f5lab.local

2. Login with the following credentials:

   • username admin
   • password admin

3. Navigate to Access -> Guided Configuration in the left-hand menu.

   

4. Click the Undeploy button

   

5. Click OK when asked, “Are you sure you want to undeploy this configuration?”

   

6. Click the Delete button once the deployment is undeployed

   

7. Click OK when asked, “Are you sure you want to delete this configuration?”

   

8. The Configuration section should now be empty

   

9. From a browser on the jumphost navigate to https://portal.f5lab.local

10. Click the Classes tab at the top of the page.

    

11. Scroll down the page until you see 203 - Microsoft Integration on the left

    

12. Hover over the tile AADFS Authentication. A start and stop icon should appear within the tile. Click the Stop Button to start the automation to delete any prebuilt objects

13. The screen should refresh displaying the progress of the automation within 30 seconds. Scroll to the bottom of the automation workflow to ensure all requests succeeded. If you you experience errors try running the automation a second time or open an issue on the Access Labs Repo.

    

14. This concludes Lab 2.