SaaS Federation iApp

Problem this snippet solves:


The official release candidate iApp template has been posted to in the RELEASE_CANDIDATE directory of the iApp package. This release has the following changes:

  • Added support for BIG-IP v12.1
  • Modified the 'SP Initiated?' field in the iApp to 'IdP Initiated?' and the values to 'No, SP only' and 'Yes, IdP and SP' to make this section more clear.


This release candidate version of the iApp template, released on 4/20/16, provides improved functionality and additional options. The deployment guide has also been substantially updated.


This iApp allows you to configure F5 BIG-IP Access Policy Manager(APM) as SAML Identity Provider(IdP) to 11 commonly used SaaS applications:

Office 365
Amazon Web Services(limited support)
Google Apps

How to use this snippet:

For information on how to download, install, and use the iApp (and various other prerequisites), see the deployment guide for this configuration:

Code :
Updated Jun 06, 2023
Version 2.0

Was this article helpful?


  • Hello,

    First off thanks for developing this iApp!

    I'm trying to configure the BigIP as an IdP for a custom service provider.

    I tried following the guide and before deploying the iApp I have created a Local IdP Service and an SP connector with details from the service provider.

    When I try to deploy the iApp, I selected the local IdP service as the application and the SP connector as the SP. In this case what should I be putting in "What EntityID do you want to use for your SaaS applications?"

    Should I put the same EntityID as I created in the Local IdP Service? Or something different? I have tried both and I get the following error when I try to deploy the iApp

    01070712:3: Values (/Common/i_saml_idp_SAMLF5_saml_sso) specified for SAML Resource (/Common/i_saml_idp_SAMLF5_saml_resource_sso): foreign key index (saml_sso_config_FK) do not point at an item that exists in the database.

    Any help appreciated.



  • Hi There

    having the exact same issue as Simon

    foreign key index (saml_sso_config_FK) do not point at an item that exists in the database.

    have checked the config dozens of times and cannot work out where this error comes from ? :-S

    any info appreciated thnx -gahanp

    === BIG-IP APM version build 005 ===