I have a question_Access policy-> AAA Servers-> HTTP

Hi SeaJoon,

Have you attempted anything yet? If so please share how far you are.

If you have not, then I would suggest after the AD Query then have a variable assign and configure it as follows

Left Side: Custom Variable = session.custom.phone_text

Right Side: Custom Expression = 

set phone [mcget {session.custom.phone}];  
set first_digits [string range $phone 0 2]; 
set middle_digits [string range $phone 4 6]; 
set last_digits [string range $phone 8 end]; 
return "$first_digits$middle_digits$last_digits";

You will need to change session.custom.phone to the name of the AD attribute. Then you can use the session.custom.phone_text in the HTTP AAA object.

-Seth