Manual Chapter : Example: Configuring an SP policy with different IdPs

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9
Manual Chapter

Example: Configuring an SP policy with different IdPs

In a per-request policy, you can configure different SP agents in different subroutines to communicate with different Identity Providers (IdPs). In this case, requests directed to different parts of an application could take different branches so that authentication requests are sent to different IdPs.
Here's an example per-request policy that performs SAML step-up authentication with Okta or Ping depending on which application is being accessed.