Manage access to all applications,
on-prem and in the cloud

Leverage best of breed products for IDaaS and network gateways with Okta and F5 Networks®.

The Challenge

Enterprises are now beginning to centralize their IAM programs around IDaaS, moving the center of gravity of identity management to the cloud. With this transition comes the need to modernize on-prem applications, or implement solutions that enable more direct integration to IDaaS.

The Solution

Once the F5® BIG-IP® platform and, more specifically, F5 BIG-IP Access Policy Manager® (BIG-IP APM®) is deployed and configured to Okta, IT admins can manage access through a single pane of glass in the Okta admin console. Network admins are able to maintain the security of on-prem access through F5 BIG-IP APM.

With F5 BIG-IP APM integrated with Okta, end-users can authenticate once into Okta and seamlessly access on-prem applications. In addition, F5 BIG-IP APM extends Okta’s authentication capability to applications that do not have native authentication mechanisms or support header-based authentication. Finally, F5 BIG-IP APM provides an additional layer of security for on-prem applications by securing all HTTP traffic to and from an application.

Application Authentication Mechanism	Integration
Pre-built Integration in Okta Application Network (5000+ integrations)	Okta
Federation protocols SAML, WS-Fed, OpenID Connect	Okta
Any Application with a Login Form	Okta
No Native Authentication	Okta + F5 BIG-IP APM
Kerberos/NTLM Exchange Authentication	Okta + F5 BIG-IP APM
Header-based Authentication	Okta + F5 BIG-IP APM
Reverse proxy—Access on-prem app from outside firewall	Okta + F5 BIG-IP APM
Secure HTTP traffic to/from on-prem app	Okta + F5 BIG-IP APM

Motorists Insurance Group Gives Customers A Seamless Experience With F5 + Okta Solution

Read the case study

Contractor and Partner Access to On-Prem SharePoint Portals

It can be a challenge to expose SharePoint Server (on-prem) to external users such as contractors or partners. Okta can integrate to SharePoint for SSO via federation, however in order to use certain SharePoint modules, such as SharePoint business intelligence features, users must have a Kerberos token.

F5 BIG-IP APM supports the key requirement of exchanging SAML assertions for Kerberos tokens, enabling use of the full set of functionality in SharePoint. Okta, paired with F5 BIG-IP APM, can manage contractor or partner identities and enforce multi-factor authentication.

Multi-Factor Authentication for
Legacy Applications on IaaS

Enterprises that are moving on-prem servers to IaaS need to have a strategy for protecting access to those resources. One of the benefits of moving to IaaS may be that the service can be more easily reached from any network. F5 BIG-IP APM plays a key role in exposing these on-prem servers to the internet. Given the greater exposure, a good practice is to require multi-factor authentication to access these services. Okta can easily add multifactor authentication with a soft token (iOS, Android or Windows Phone), SMS or voice as factors.

One End-User Portal for All Applications, On-Prem and Cloud

The Okta end-user portal is built to make it easy for end-users to access all their applications from one place. The portal is customizable by end-users, which drives a high level of user adoption. Typically, organizations using the Okta portal want all the end-users’ applications exposed and accessible through the portal. Integrating Okta with F5 BIG-IP APM enables the user to log in once to Okta, and access all applications, cloud and on-prem, in one place.

Customer Journey

Okta + F5 Networks = Greater scale, reliability for Pitney Bowes’ global e-commerce platform

Read the case study ›

Watch the webinar

99.92%

availability, significantly higher than their previous legacy solution

The Challenge

The Solution

Application Authentication Mechanism

Integration

Okta + F5 = Secure Connections for Cloud and On-Premises Applications

Okta and F5 Networks for Complete Access Management for Hybrid IT

Okta Integration Guide for Web Access Management with F5 BIG-IP