Last Modified: Oct 19, 2025
Affected Product(s):
BIG-IP APM
Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 16.1.6, 16.1.6.1
Fixed In:
17.1.0
Opened: Apr 27, 2022 Severity: 3-Major
In BIG-IP APM 17.0.0 and earlier versions, the Kerberos SSO Resource Based Constrained Delegation (RBCD) is not supported. Constrained Delegation does not work without User Domain Controller admin adding cross domain service FQDNs as part of Delegated User.
The Service administrators need support of User domain administrators to add new services as part of delegation.
User Domain Controller admin adding cross domain service FQDNs as part of Delegated User.
User domain administrators can add new services as part of delegation.
From BIG-IP APM 17.1.0 version onward, RBCD feature is supported. Service administrators can directly add or delete new service FQDNs with in Service Domain Controller.