Checking if SAML Attributes Exist in VPE

All,

 

Hoping a TCL expert can help me understand where I'm going wrong. Admittedly I'm a newbie to the nuances in TCL but a big fan of SAML.

 

I have a SAML SP configured on APM 11.6. I see the SAML attributes in the logs but am having a hard time referring to them because the attributes are fully qualified URI's. In short the variable names include the URI types. For example a UPN attribute in SAML appears as variable name 'session.saml.last.attr.name.http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn'.

 

How do I properly refer to variables in this form (or at least escape them) so the can be used in expressions?

 

Thanks in advance.

 

CyberT