Forum Discussion

jitu's avatar
jitu
Icon for Nimbostratus rankNimbostratus
Jul 05, 2017

F5 APM with specific not all SAML SP initiated connection issue, cause iRule execution fail, TCP reset with F5 Version 12.1.2 HF1

We have a problem with a specific SP initiated SAML request. iRule execution fail   Problem details   We have F5 APM as a IDP setup. Single IDP with multiple SP. One of the specific SP initi...
application delivery
BIG-IP Access Policy Manager (APM)
LTM
security
nag_54823's avatar
nag_54823
Icon for Cirrostratus rankCirrostratus
Jul 06, 2017

Hi Jitu,

 

You need to use either state_allow or state_deny or state_redirect. You should not use all in one.

 

Example

 

when HTTP_REQUEST priority 30 { set apm_cookie [HTTP::cookie value MRHSession] if { "[ACCESS::session exists -state_allow -sid $apm_cookie]" } {