Lab 1.1: Create a SAML Identity Provider

digraph breadcrumb { rankdir="LR" ranksep=.4 node [fontsize=10,style="rounded,filled",shape=box,color=gray72,margin="0.05,0.05",height=0.1] fontsize = 10 labeljust="l" subgraph cluster_provider { style = "rounded,filled" color = lightgrey height = .75 label = "BIG-IP APM" idp [label="IDP",color="steelblue1"] spconnector [label="SP Connector"] bind [label="Bind Connectors"] resource [label="SAML Resource"] webtop [label="Webtop"] profile [label="Access Profile"] vs [label="VS"] test [label="Test"] idp -> spconnector -> bind -> resource -> webtop -> profile -> vs -> test } }

Task 1 - Create a Local IdP Service

In this lab we will create the local Identity Provider service. This service is responsbile for handling the authentication for the SaaS application.

Note

This guide may require you to Copy/Paste information from the guide to your jumphost. To make this easier you can open a copy of the guide by using the Lab Guide bookmark in Chrome.

  1. Navigate to Access ‣ Federation ‣ SAML Identity Provider ‣ Local IdP Services

  2. Click the + sign

    image1

  3. Configure the General Settings:

    Property Value
    IdP Service Name idp.f5demo.com
    IdP Entity Id https://idp.f5demo.com

    image2

  4. Configure the Assertiion Settings:

    Property Value
    Assertion Subject Value %{session.logon.last.username}

    image3

  5. Configure the Security Settings:

    Property Value
    Signing Key idp.f5demo.com.key
    Signing Certificate idp.f5demo.com.crt

    image4

  6. Click the OK button.