F5 APM with specific not all SAML SP initiated connection issue, cause iRule execution fail, TCP reset with F5 Version 12.1.2 HF1

Hi, This can cause you problems

when HTTP_REQUEST priority 30  {
log local0. "HTTP Path= [HTTP::path]"
log local0. "Access policy result= [ACCESS::policy result]"
            >>>>>>if {"[ACCESS::policy result]" eq "allow"}

You should specify the sessionid from the MHRSession when using ACCESS commands in HTTP_REQUEST events (in general out of ACCESS events) otherwise you will get an error. Other option for you is do the same validation but within ACCESS_ACL_ALLOWED as it takes by default the session id evaluated in that request.

I used more this command: ACCESS::session exists -state_{allow|deny|redirect|inprogress} -sid