f5-appsvcs-extension
f5-appsvcs-extension copied to clipboard
Not able to declare adfs_proxy profile
Issue Description:
Problem:
I'm facing a challenge with configuring the adfs_proxy profile for an LTM virtual server (<VS-name>) using tmsh. The issue is that whenever changes are made to the virtual server that requires this profile, it gets unchecked during the declaration.
Desired Solution: I suggest two possible solutions:
- Modify the behavior of the virtual server to ignore the
adfs_proxyprofile. - Provide a way to explicitly declare the
adfs_proxyprofile and retain its configuration.
Additional Information:
The adfs_proxy profile requires establishing trust with the ADFS that you proxy. Here's the workaround we're currently using:
- We've set up a "fake" virtual server in /Common/ with an established trust.
- We assign the trust server certificate to the declaration we want.
- With every change, we have to manually recheck the
adfs_proxyprofile in the GUI, which is not ideal.
This issue is causing inefficiencies in our workflow, and we're looking for a more streamlined solution to manage the adfs_proxy profile.
Environment:
- TMOS Version: 17.1.3
F5 source: https://my.f5.com/manage/s/article/K81345433