F5Demo PortalSystems Engineering
  • Catalogue
Demo environment
  1. Catalogue
  2. Security
  3. Azure AD Authentication with BIG-IP APM
Under construction
SecurityDemo offlineAPMEntra IDSSOSAMLKerberos

Azure AD Authentication with BIG-IP APM

Extend Entra ID single sign-on to legacy applications that cannot speak modern auth.

Overview

Many customers have standardised on Microsoft Entra ID but still run applications that only understand Kerberos, header-based or form-based authentication. This demonstration positions BIG-IP APM as the bridge: APM acts as the SAML service provider or OIDC relying party to Entra ID, then performs protocol translation so the legacy application receives credentials in the format it expects. You will complete a full SSO flow, show conditional access being honoured, and demonstrate step-up authentication for a sensitive URI. A reliable, high-value demo for any Microsoft-centric account.

Architecture

Laptop

Mobile

F5 Application Delivery & Security Platform

WAF · API Security · Bot Defense · Load Balancing

Data Centre

Public Cloud

Kubernetes

Generic illustration — a specific architecture diagram has not been uploaded for this demo yet.

How to access it

Online Demo

Access— this demo is currently offline

Credentials

Username
demo.user@f5demo.onmicrosoft.com
Password
••••••••••••••••••

Lab URL

Access

Lab Guide URL

Access
Environment
F5 UDF — blueprint "APM 17.1 + Entra ID federation"
Setup time
~20 minutes

Maintainer

Matthieu Dierick— chat on Microsoft Teams

Maintainer notes

The federation trust is pre-configured in the blueprint. If the SAML assertion is rejected, check clock skew on the BIG-IP first — it is the most common cause.

How to learn it

Highspot

Positioning, battlecards and customer-facing collateral.

SharePoint

Demo scripts, lab guides and configuration files.

Video walkthroughs

Recorded demonstrations on @MatthieuDierickF5. No dedicated recording is linked for this demo yet.

Related Security demos

Under construction
SecurityDemo offline

AI WAF on BIG-IP

Advanced WAF on BIG-IP with behavioural DoS protection and ML-driven policy tuning.

Advanced WAFBIG-IPBehavioural DoS+1
Under construction
SecurityDemo offline

AI WAF on F5XC

SaaS-delivered WAAP with machine-learning threat detection and automatic false-positive suppression.

WAAPSaaSMachine Learning+1
SecurityDemo online

API Security Hybrid deployment

One API security policy spanning on-premises gateways and SaaS-delivered enforcement.

API SecurityHybridF5XC+1

F5 Demo Portal · Internal use · Demonstration content, sample data only

Demo channel