Forum Discussion
AlgebraicMirror
Altostratus
AltostratusIs there a way in iRules to modify which IDP profile the APM selects?
Is there any way to modify how the APM matches an SP to an IDP configuration? I know normally it looks at the Issuer ID that the SP sends and uses that to match an SP configuration, which is in turn ...
Stanislas_Piro2
Cumulonimbus
CumulonimbusHi,
In the SAML SP/IdP Binding, you can check every session variable to choose IdP.
If you want to do the same as Office 365:
- create a logon page with email address form attribute.
-
Create a variable assign with expression : session.logon.last.maildomain = if { [mcget {session.logon.last.email}] contains "@" } { set email [mcget {session.logon.last.email}]; return [string range $email [expr {[string first "@" $email] +1}] end ]; } else { return {[mcget {session.logon.last.email}] } }
-
create a SAML Auth box
In the SAML Binding, choose the IdP based on the variable session.logon.last.maildomain
