SAML Response - Reply URL is http instead of https due to SSL offloading

Question

I'm trying to enable SSO using SAML with AzureAD as the IDP. I'm struggling to get it to work, we use a BIG-IP as our loadbalancer which handles the SSL offloading. Adaxes webinterface runs on port 80 behind the loadbalancer.

The reply url is the saml response provided by adaxes is using http instead of https which AzureAD does not like. AzureAD does not allow you to put http addresses for the reply url.

The Web Interface address configured in adaxes is something like: https://adaxes,company.com

Does anybody have experience with this setup using SSL offloading or am I forced to remove the SSL offloading and do it on the server itself?

Answer 1

Hello!

Unfortunately, we do not have any experience configuring Adaxes to work with Azure AD as an Identity Provider in conjunction with SSL offloading. As per our check, there is no possibility to configure the desired workflow. However we recommend considering a possibility to contact BIG-IP support to check for possible solutions.