For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ChristianH_1903's avatar
ChristianH_1903
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Generating SAML attributes and calculations in variable assignments

Hi,   I'm currently setting up my f5 to act as SAML IdP. One of the attributes I need to send back is supposed to contain an opaque, privacy-preserving unique ID. I was thinking of using e.g. sha2...
application delivery
BIG-IP Access Policy Manager (APM)
saml
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Nov 18, 2015

I just tried to test that out in my environment, and it looks like the command 

sha256
is not available within the VPE (seems that some of the custom commands are only available through the iRules). I think because of that, if you wanted a SHA256 hash, you'd need to use an iRule event and do it in an iRule.

Another option might be to use a hex-encoding of an attribute, which you can do in the VPE itself. You could use a variable assign with the value:

binary scan [mcget session.ad.last.attr.sAMAccountName] H* encstr
return $encstr