Forum Discussion

Samuel_Rydén's avatar
Samuel_Rydén
Icon for Altocumulus rankAltocumulus
Mar 04, 2020

How do I determine SP origin on a BigIP IdP

Background: We have a BigIP 14.1 environment, and we've set up an idp to respond to https://idp.domain.com, where only the IdP Entity ID differs, such as https://idp.domain.com/service1, https://idp...
BIG-IP Access Policy Manager (APM)
devops
iRules
  • raZorTT's avatar
    raZorTT
    Apr 15, 2020

    Hi Samuel

     

    How did you go with delv3chio's solution? Wish that was around 9 months ago ;)

     

    We have an iLX plugin that inflates/parses the incoming SAML assertion. It grabs the issuer and/or the ACS url and we then make decisions in the policy based on the returned results.

     

    Cheers,

    Simon

Samuel_Rydén's avatar
Samuel_Rydén
Icon for Altocumulus rankAltocumulus
Mar 20, 2020

Is there nobody out there familiar with using a BigIP as an IdP who can identify anything we're doing wrong in our thinking or methodology in this scenario, or who has faced a similar problem?