Last Modified: Jul 24, 2024
Affected Product(s):
BIG-IP APM
Known Affected Versions:
16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5
Opened: Jun 15, 2023 Severity: 3-Major
Exported IDP/SP metadata file does not include multiple certificates.
This issue may cause SAML functionality outage as 'corrupted'/'not correct' metadata from apm as saml idp is going to be shared with saml SPs.
1. BIG-IP configured as IDP/SP. 2. Certificate files containing multiple certificates are attached to the "Local SP/IDP service" configuration. 3. Perform metadata export of the "Local SP/IDP service" object.
Edit the metadata file to include other certificates also by adding them under additional XML tags <ds:X509Certificate> /ds:X509Certificate>.
None