For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ChristianH_1903's avatar
ChristianH_1903
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Generating SAML attributes and calculations in variable assignments

Hi,   I'm currently setting up my f5 to act as SAML IdP. One of the attributes I need to send back is supposed to contain an opaque, privacy-preserving unique ID. I was thinking of using e.g. sha2...
application delivery
BIG-IP Access Policy Manager (APM)
saml
ChristianH_1903's avatar
ChristianH_1903
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Dear All, adding the ";" did do the trick.

 

As far as I understand the definition of eduPersonTargetedID it is an attribute which is unique for a user to each service provide and is purposely obfuscated so that the user's personal details are not provided. They can be used to provide both a unique identifier for the user and enable service providers to create personalised services. Thus using a fixed attribute of the user (like the email adress) and adding some prefix/suffix per SP to it should do the trick.

 

If I can't use SHA256 directly in the variable assignment, how could I use an irule to add the argument to my SAML response?