You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Learn to configure F5 BIG-IP Access Policy Manager (APM) and Azure Active Directory (Azure AD) for secure hybrid access (SHA) to form-based applications. BIG-IP published services for Azure AD single sign-on (SSO) has benefits:
17
17
18
18
* Improved Zero Trust governance through Azure AD preauthentication and Conditional Access
19
-
* See,[What is Conditional Access?](../conditional-access/overview.md)
* See [Forms-based authentication](/troubleshoot/aspnet/forms-based-authentication)
82
82
83
83
## BIG-IP configuration
84
84
@@ -109,7 +109,7 @@ BIG-IP registration is the first step for SSO between entities. The app you crea
109
109
110
110
Configure the BIG-IP registration to fulfill SAML tokens that BIG-IP APM requests.
111
111
112
-
1. In left menu, in the **Manage** section, select **Single sign-on*.
112
+
1. In left menu, in the **Manage** section, select **Single sign-on**.
113
113
2. The **Single sign-on** pane appears.
114
114
3. On the **Select a single sign-on method** page, select **SAML**.
115
115
4. Select **No, I'll save later**.
@@ -225,9 +225,9 @@ Perform FBA SSO in client-initiated mode or BIG-IP-initiated mode. Both methods
225
225
226
226

227
227
228
-
To learn more, go to techdocs.f5.com for [Manual Chapter: Single sign-on methods](https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-access-policy-manager-single-sign-on-concepts-configuration-14-1-0/single-sign-on-methods.html#GUID-F8588DF4-F395-4E44-881B-8D16EED91449)
228
+
To learn more, go to techdocs.f5.com for [Manual Chapter: Single sign-on methods](https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-access-policy-manager-single-sign-on-concepts-configuration-14-1-0/single-sign-on-methods.html#GUID-F8588DF4-F395-4E44-881B-8D16EED91449).
229
229
230
-
### Configure an Access profile
230
+
### Configure an access profile
231
231
232
232
An access profile binds the APM elements that manage access to BIG-IP virtual servers, including access policies, SSO configuration, and UI settings.
233
233
@@ -289,7 +289,7 @@ An access profile binds the APM elements that manage access to BIG-IP virtual se
289
289
28. The **Successful** branch changes to **Allow**.
290
290
29. Select **Save**.
291
291
292
-
#### (Optional) configure attribute mappings
292
+
#### (Optional) Configure attribute mappings
293
293
294
294
You can add a LogonID_Mapping configuration. Then, the BIG-IP active sessions list has the signed-in user UPN, not a session number. Use this information for analyzing logs or troubleshooting.
295
295
@@ -394,7 +394,7 @@ Learn more:
394
394
395
395
Your application is published and accessible with SHA with the app URL or Microsoft portals.
396
396
397
-
The application appears as a target resource in Conditional Access. Learn more: [Building a Conditional Access policy](../conditional-access/concept-conditional-access-policies.md)
397
+
The application appears as a target resource in Conditional Access. Learn more: [Building a Conditional Access policy](../conditional-access/concept-conditional-access-policies.md).
398
398
399
399
For increased security, block direct access to the application, enforcing a path through the BIG-IP.
0 commit comments