For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mark_Smith_-_NC's avatar
Mark_Smith_-_NC
Icon for Altocumulus rankAltocumulus
Aug 16, 2017

exchange 2010 outlook anywhere only for specific users

Has anyone setup a policy using APM to allow "Outlook Anywhere" connections to Exchange 2010 but only for specific users that are a member of a specific AD group.   We've been trying to get this ...
application delivery
BIG-IP Access Policy Manager (APM)
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 17, 2017

Hi,

If you requires 

DOMAIN\USERNAME
for some SSO profiles and 
USERNAME
for other SSO profiles, you can use this:

session.sso.token.last.ntusername = expr { "DOMAIN\\[mcget {session.ad.last.attr.sAMAccountName}]" }

then, in your SSO profile requiring 

DOMAIN\USERNAME
, use 
session.sso.token.last.ntusername
instead of 
session.sso.token.last.username