https://github.com/mikej81/f5-wsstar-ilx
Node/iRulesLX solution to simulate ADFS; WS-Federation, STS/WS-Trust, etc.
https://github.com/mikej81/f5-wsstar-ilx
Last synced: about 2 months ago
JSON representation
Node/iRulesLX solution to simulate ADFS; WS-Federation, STS/WS-Trust, etc.
- Host: GitHub
- URL: https://github.com/mikej81/f5-wsstar-ilx
- Owner: Mikej81
- Created: 2016-12-19T20:54:55.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2020-10-27T21:07:39.000Z (over 4 years ago)
- Last Synced: 2025-02-12T17:32:05.778Z (4 months ago)
- Language: Tcl
- Homepage: https://devcentral.f5.com/articles/big-ip-iruleslx-fakeadfs-ws-federation-saml11-24608
- Size: 4.45 MB
- Stars: 7
- Watchers: 5
- Forks: 6
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# f5-fakeadfs-ilx
This was created for iRulesLX on BIG-IP, for replacement of AD FS to use as a Trusted Identity Provider for SharePoint.
Modified to support multiple FQDNs and Trusted Identity Providers on a single virtual server. This is still SP initiated.
## Installation
```
import tgz to BIG-IP - See included PDF
```
May work better building from scratch in some environments.
https://devcentral.f5.com/articles/big-ip-iruleslx-fakeadfs-ws-federation-saml11-24608
## Example Configuration
* SharePoint https://github.com/Mikej81/f5-fakeadfs-ilx/blob/master/F5%20ADFS%20iRulesLX%20Implementation.pdf
* Exchange https://github.com/Mikej81/f5-fakeadfs-ilx/blob/master/EXCHANGE.md
## Usage
IDP initiated use-case requires a single VS, it does not require any SAML IDP or SP configurations as the initial Client Auth can be anything, the WS-Fed assertion is generated on the Server side, and posted to the Application.
For multiple VS scenarios, see included PDF.
Etensive notes are in the code.
## TODO
Working on adding Ws-Trust support. FederationMetadata is mostly complete, endpoints currently have to be changed in federationmetadata.template, but this will be dynamic in later code updates.
## Release History
* 0.1.0 Initial release
* 0.2.0 Minor tweaks
* 0.3.0 Multiple FQDN Support added - Jeff larmore
* 0.3.1 STS Federation Metadata Support added; any endpoint ending with FederationMetadata.xml
* 0.4.0 Extensive code changes, cleanup, and other modifications to support 13.x and fix IDP/SP initiated paths.
* 0.5.0 WS-Trust - RST and RSTR generation, not added to an ILX release yet.