Cirrus
CumulonimbusHi,
You don't need an Irule for this need instead using an Irule event.
I advise you to use APM (Empty box)
1- create an empty box
2- Add a branch rules
3 create an advanced expression
And enjoy.
Cirrus
I tried your solution and most of it worked but if the variable "session.ldap.last.attr.employeeID" are empty the session continues to the next block. The logic should be, if the variable "session.ldap.last.attr.employeeID" matches "session.saml.last.attr.name.xyz" everything are okay but if they don´t match or the variable are empty the APM should discard the session.