Forum Discussion

Spider's avatar
Spider
Icon for Nimbostratus rankNimbostratus
Jan 12, 2022

APM SAML group attribute

Hi, I am trying to match on Azure AD group attribute in the APM access policy but i don't get it to work, the APM is acting as SAML SP. I'm getting the attribute in the access reports -> variables a...
BIG-IP Access Policy Manager (APM)
security
Spider's avatar
Spider
Icon for Nimbostratus rankNimbostratus
Jan 17, 2022

Hi again, thanks for the response. I got this to work now, seems to have been a matter of whitespace, this works now using the expression:

expr {[mcget {session.saml.last.attr.name.http://schemas.microsoft.com/ws/ 2008/06/identity/claims/groups}] equals "<group-id-number>"}

 

I'm using the same structure as you are now, that seems to do the trick. :)