IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IDP and SP as partners on same appliance

    Posted Thu August 18, 2022 08:00 AM
    I came across an older (2019) link that, in short, states the following:

    'Identity Provider and Service Provider is not recommended to be configured as partners on the same appliance or on the same external HVDB'

    Can it be clarified if this limitation/recommendation is still valid or not with ISVA 10.x appliances/dockers?

    The link to the support page is here.



    ------------------------------
    Gerardus Bastiaansen
    ------------------------------


  • 2.  RE: IDP and SP as partners on same appliance

    Posted Fri August 19, 2022 02:58 AM
    Link should be this one ...
    https://www.ibm.com/support/pages/identity-provider-and-service-provider-not-recommended-be-configured-partners-same-appliance-or-same-external-hvdb

    ------------------------------
    Gerardus Bastiaansen
    ------------------------------



  • 3.  RE: IDP and SP as partners on same appliance
    Best Answer

    Posted Fri August 19, 2022 03:25 AM
    This is still a documented limitation in the ISVA 10.0.4 version.  
    I suspect you know, but this really does apply specifically to SAML SP's and IdP's that partner each other.   (meaning you can definitely have SP's and IdP's on the same Appliance/HVDB)

    ------------------------------
    HANS VANDEWEGHE
    ------------------------------