For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rkram_p's avatar
rkram_p
Icon for Altostratus rankAltostratus
Apr 21, 2022

APM- Dynamic Resource assignment based on SAML attributes

Hi Team, Please help me to write expression( Advance resource assignment) to assign resources based on SAML attribute condition. Access policy: Machine cert auth --> SAML --> Endpoint check --> Ad...
application delivery
security
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Apr 21, 2022

Hello rkram_p

Maybe with this expression:

expr {[mcget {session.saml.last.attr.name.exter.extactivitycenter}] eq "20034567"}

But I would say that your syntax is valid. Please, could you check your user variables to verify that both values exist?

  • session.saml.last.attr.name.exter.extactivitycenter
  • 20034567

One easy way to check this is to use a message box before ending the policy evaluation. At this precise moment, check the variables to confirm that both values exist