Solution: LTM+APM - Client Certificate to Single Domain kerberos SSO¶
This solution documents all the necessary pieces required to create an APM policy that prompts the user for their certificate then performs kerberos SSO to an application.
Objective:¶
- Gain an understanding of a certificate based authentication
- Gain an understanding of a variable assignments
- Gain an initial understanding of kerberos SSO
Content:
Configuration Comments¶
Access Blueprint Revision¶
- 41
Postman Collection(s)¶
- kerb.acme.com-create.postman_collection.json
- kerb.acme.com-delete.postman_collection.json
APM Profile(s)¶
- profile_Common_kerb.acme.com-psp.conf.tar
BIG-IP Versions Tested¶
- 15.1
BIG-IP Components used:¶
- Virtual Server
- HTTP Profile -https://support.f5.com/csp/article/K4707
- Client-side SSL Profile -https://support.f5.com/csp/article/K14783
- Access Profile
- LDAP AAA Object
- OCSP Responder AAA Object
- Kerberos SSO