For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ChristianH_1903's avatar
ChristianH_1903
Icon for Nimbostratus rankNimbostratus
Nov 18, 2015

Generating SAML attributes and calculations in variable assignments

Hi,   I'm currently setting up my f5 to act as SAML IdP. One of the attributes I need to send back is supposed to contain an opaque, privacy-preserving unique ID. I was thinking of using e.g. sha2...
application delivery
BIG-IP Access Policy Manager (APM)
saml
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 19, 2015

I guess it is the later to make sure that each SP receives a different value for "eduPersonTargetedID"

 

I'd imagine this value would be something that you'd create dynamically. At the very least you could simply encode the username for simple opacity, or actually pre-compute some identifier and store in the directory. In either case this can all be handled in real time within a single IdP instance.