Lab 1.1 - Create Authentication objects

The first step in deploying CertSSO is creating the objects required for the user to authenticate to APM. In this lab, the user will authenticate via Active Directory and simulated MFA via RADIUS. The user’s authentication method to APM is independent of how the BIG-IP authenticates the user to the backend server for Single-Sign-On. This allows an organization to choose an authentication scheme that matches their needs such as SAML, OAuth, or other method.

Task - Create an Active Directory AAA Object

1. From the web browser, click on the Access tab located on the left side.

   

2. Navigate to Authentication >> Active Directory, then click the + (plus symbol) to create a new AAA object

   

3. Enter the following information for the AD Authentication Object

   • Name: ad_servers
   • Domain Name: f5lab.local
   • Domain Controller Pool Name: ad_pool
   • Domain Controller IP address: 10.1.20.7
   • Domain Controller Hostname: dc.f5lab.local
   • admin name: admin
   • admin Password: admin

   

4. Click Finished

Task - Create a RADIUS AAA Object

1. From the web browser, click on the Access tab located on the lefthand side.

2. Navigate to Authentication >> RADIUS, then click the + (plus symbol) to create a new AAA object

   

3. Enter the following information for the AD Authentication Object

   • Name: radius_servers
   • Server Pool Name: radius_pool
   • Server Addresses: 10.1.20.8
   • Secret password: secret

   

4. Click Finished