Bug ID 551225: SAML IdP requests may fail when Sharepoint is opened through Portal Access in the same browser

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Oct 07, 2015

Severity: 3-Major

Symptoms

SAML IdP resources can't be opened from webtop if there is a Sharepoint resource window opened from the same webtop. An attempt to open SAML IdP resource could result in 404 or connection reset. This was happening because Portal Access code processed special cookie for Sharepoint before checking if the request is internal for APM.

Impact

SAML resources can't be accessed from webtop.

Conditions

This exists when a SAML IdP resource exists on a full webtop and a user attempts to connect to a SharePoint Portal Access resource.

Workaround

when HTTP_REQUEST { if { [HTTP::uri] starts_with "/saml" } { HTTP::cookie remove "MRHSHint" } }

Fix Information

Addressed an issue where SAML IdP requests were failing because of the special Sharepoint handling code in Portal Access.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips