Forum Discussion

Evgeny_Udaltsov's avatar
Evgeny_Udaltsov
Icon for Nimbostratus rankNimbostratus
Nov 16, 2022

f5 BIG IP APM Show where a SAML Request from

Hi Team, i try to find a solution to figure out a way where the SAML Request from. Is it possible? The memberOf attribute needs to be changed, depending on the origins of the request.
application delivery
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Nov 21, 2022

Expanding this answer, you can follow different policy branches for different SPs of SAML authentication requests, but you can't use "issuer" like that directly. This is covered by F5 enhancement request ID 960161 (currently not on roadmap).

A workaround to this issue is listed here:

https://support.f5.com/csp/article/K55982241

What you'd do here is choose different queries or alter your memberOf depending on the branch taken.