Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP APM
Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3
Fixed In:
13.1.0, 13.0.1
Opened: Mar 14, 2017 Severity: 2-Critical Related Article:
K14429395
When the BIG-IP system is configured as SAML SP, there are two bindings supported for SLO profile: HTTP-Redirect and HTTP-POST (default option). If the BIG-IP system is configured to initiate SAML SP SLO profile with redirect binding - tmm may restart.
Tmm restarts. Traffic disrupted while tmm restarts.
-- Configure the BIG-IP system as SAML SP. -- Configure HTTP-Redirect binding for SLO profile. -- Initiate SLO on SAML SP.
Reconfigure the BIG-IP system to use HTTP-POST binding for SLO profile. Configuration should be changed on IDP connector objects.
Tmm no longer restarts when SAML SLO is initiated by SP using redirect binding.