I’m happy to announce the F5 APM and Okta integration guide has been published on Okta’s website. I’ve been playing with this solution for the past 4 months and I have to say it’s pretty cool. F5 Access Policy Manager and Okta complement each other well and provide customers a solution to address identity, access and single sign-on for cloud and on-premises applications regardless of their authentication requirements.
In this integration guide F5 and Okta focus on single sign-on capabilities for on-premises legacy applications that cannot consume a SAML or Claim assertion. For these legacy applications you can leverage F5’s Access Policy Manger to perform Kerberos Constrained Delegation or Header authentication.
I deviated from the deployment guide and used APM’s per-request policy engine to insert the header versus the iRule. I prefer this method as it is easier for people new to F5 and it will survive future upgrades.
I’ve provided a video demo below: