Skip to content

Commit 4b0d474

Browse files
authored
Merge pull request #182920 from NishthaBabith-V/patch-8
Update f5-big-ip-kerberos-advanced.md
2 parents 454a225 + 42f9737 commit 4b0d474

File tree

2 files changed

+10
-8
lines changed

2 files changed

+10
-8
lines changed

articles/active-directory/manage-apps/f5-big-ip-kerberos-advanced.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,9 @@ To learn about all of the benefits, see the article on [F5 BIG-IP and Azure AD i
3232

3333
For this scenario, you will configure a critical line of business (LOB) application for **Kerberos authentication**, also known as **Integrated Windows Authentication (IWA)**.
3434

35-
To integrate the application directly with Azure AD, it’d need to support some form of federation-based protocol such as Security Assertion Markup Language (SAML), or better. But as modernizing the application introduces risk of potential downtime, there are other options. While using Kerberos Constrained Delegation (KCD) for SSO, you can use [Azure AD Application Proxy](../app-proxy/application-proxy.md) to access the application remotely. In this arrangement, you can achieve the protocol transitioning required to bridge the legacy application to the modern identity control plane. Another approach is to use an F5 BIG-IP Application Delivery Controller (ADC). This enables overlay of the application with Azure AD pre-authentication and KCD SSO, and significantly improves the overall Zero Trust posture of the application.
35+
To integrate the application directly with Azure AD, it’d need to support some form of federation-based protocol such as Security Assertion Markup Language (SAML), or better. But as modernizing the application introduces risk of potential downtime, there are other options. While using Kerberos Constrained Delegation (KCD) for SSO, you can use [Azure AD Application Proxy](../app-proxy/application-proxy.md) to access the application remotely.
36+
37+
In this arrangement, you can achieve the protocol transitioning required to bridge the legacy application to the modern identity control plane. Another approach is to use an F5 BIG-IP Application Delivery Controller (ADC). This enables overlay of the application with Azure AD pre-authentication and KCD SSO, and significantly improves the overall Zero Trust posture of the application.
3638

3739
## Scenario architecture
3840

articles/active-directory/manage-apps/toc.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -158,19 +158,19 @@
158158
href: datawiza-with-azure-ad.md
159159
- name: F5
160160
items:
161-
- name: F5 BIG-IP and Azure AD integration
161+
- name: Integrate F5 BIG-IP with Azure Active Directory
162162
href: f5-aad-integration.md
163-
- name: F5 BIG-IP VE deployment in Azure IaaS
163+
- name: Deploy F5 BIG-IP Virtual Edition VM in Azure
164164
href: f5-bigip-deployment-guide.md
165-
- name: F5 BIG-IP with Azure AD for passwordless VPN
165+
- name: Configure F5 BIG-IP SSL-VPN solution in Azure AD
166166
href: f5-aad-password-less-vpn.md
167-
- name: F5 BIG-IP with Azure AD for forms-based authentication SSO
167+
- name: Configure F5 BIG-IP Access Policy Manager for form-based SSO
168168
href: f5-big-ip-forms-advanced.md
169-
- name: F5 BIG-IP with Azure AD SSO for header based authentication
169+
- name: Configure F5 BIG-IP Access Policy Manager for header-based SSO
170170
href: f5-big-ip-header-advanced.md
171-
- name: Protect on-premises applications with F5 BIG-IP and Azure AD B2C
171+
- name: Extend Azure Active Directory B2C to protect on-premises applications using F5 BIG-IPC
172172
href: https://docs.microsoft.com/azure/active-directory-b2c/partner-f5
173-
- name: F5 BIG-IP for SSO to header-based and LDAP applications
173+
- name: Configure F5 BIG-IP Easy Button for Header-based and LDAP SSO
174174
href: f5-big-ip-ldap-header-easybutton.md
175175
- name: Configure F5 BIG-IP Access Policy Manager for Kerberos authentication
176176
href: f5-big-ip-kerberos-advanced.md

0 commit comments

Comments
 (0)