Deployment Example 2: Federation Using SAML v2

ProcedureTo Install the SSL Certificate

After you receive the certificate from the issuer, install the SSL Certificate.

  1. Log in to the BIG-IP load balancer console.

    1. In the BIG-IP load balancer console, click the Cert Admin tab.

    2. On the Cert Admin tab, click Install Certificate.

    3. In the Install SSL Certificate page, paste the certificate text you received from the certificate issuer. Example:


      -----BEGIN CERTIFICATE REQUEST-----
      UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAU
      AMF8xCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0
      EgRGF0YSBTZWN1cml0eSwgSW5jLjEuMCwGA1UEC
      xMlU2VjdXJlIFNlcnZlciBDZXJ0aWZpY2F0aW9u
      IEF1dGhvcml0eTAeFw0wMTA4MDIwMDAwMDBaFw0
      wMzA4MDIyMzU5NTlaMIGQMQswCQYDVQQGEwJVUz
      ERMA8GA1UECBMIVmlyZ2luaWExETAPBgNVBAcUC
      FJpY2htb25kMSAwHgYDVQQKFBdDYXZhbGllciBU
      ZWxlcGhvYm9uZGluZy5jYXZ0ZWwuY29tMIGfMA0
      GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8x/1dxo
      2YnblilQLmpiEziOqb7ArVfI1ymXo/MKcbKjnY2
      -----END CERTIFICATE REQUEST-----
    4. Click Install Certificate.

  2. In the left frame, click Proxies, and then click Add.

  3. On the Add Proxy page, provide the following information:

    Proxy Type:

    SSL

    Proxy Address:

    Enter the IP address of LoadBalancer-9.siroe.com.

    Proxy Service:

    Enter 3443.

    Destination Address:

    Enter the IP address of LoadBalancer-9.siroe.com.

    Destination Service:

    Enter 1080.

    SSL Certificate:

    LoadBalancer-9.siroe.com

    SSL Key:

    LoadBalancer-9.siroe.com

    Enable ARP:

    Mark this box.

    Click Next, then provide the following information:

    Rewrite Redirects:

    Choose Matching.

    Click Done.