Calling SAML Auth Macro for Portal Access Resource

Josh,

Thanks for the suggestion.  I found https://techdocs.f5.com/en-us/bigip-16-0-0/big-ip-access-policy-manager-per-request-policies/using-step-up-auth-w-saml/creating-a-per-request-policy_for-saml-step-up-auth.html but the page contents are blank.  I opened a case about the blank documentation and it turns out that "support for SAML Step -Up authentication in Per Request Policies is still a work in progress and not yet fully supported."

I ended uphaving to create a branch rule based on a "secured app" AD group.  The branch rule contains a user decision box offerinf the choice of "Secure Apps Portal" or "Normal Access".  If they choose Secured Apps, the end terminal is a redirect to a different APM profile that uses SAML auth and MFA.