github.com/versent/saml2aws@v2.17.0+incompatible/pkg/provider/f5apm/README.md (about)

     1  # F5 Access Policy Manager Provider
     2  
     3  * https://www.f5.com/products/security/access-policy-manager
     4  
     5  ## Instructions
     6  
     7  You'll need the SAML policy ID for the AWS account.  Your admin should be able to 
     8  provide this (or you'll briefly see it in a redirect when you click an application link)
     9  
    10  ```
    11  https://<YOUR ORGS DOMAIN>/saml/idp/res?id=<SAML RESOURCE ID>
    12  ```
    13  
    14  Example Config:
    15  
    16  ```
    17  [default]
    18  url                  = https://<YOUR ORGS DOMAIN>
    19  username             = <YOUR USERNAME>
    20  provider             = F5APM
    21  mfa                  = Auto
    22  skip_verify          = false
    23  timeout              = 0
    24  aws_urn              = urn:amazon:webservices
    25  aws_session_duration = 3600
    26  aws_profile          = <AWS PROFILE NAME>
    27  resource_id          = <SAML RESOURCE ID>
    28  role_arn             = 
    29  ```
    30  
    31  Where `resource_id` will be something like `/Common/example-aws-account`
    32  
    33  ## Features
    34  
    35  * Automatic detection of MFA
    36  * Automatic detection of MFA options (push, token)
    37  
    38  ## More Details
    39  
    40  * https://devcentral.f5.com/articles/configuration-example-big-ip-apm-as-saml-idp-for-amazon-web-services