Forum Discussion
AlgebraicMirror
Altostratus
AltostratusIs there a way in iRules to modify which IDP profile the APM selects?
Is there any way to modify how the APM matches an SP to an IDP configuration? I know normally it looks at the Issuer ID that the SP sends and uses that to match an SP configuration, which is in turn ...
Kevin_Stewart
Employee
EmployeeGoing to jump into the conversation here and ask a few more questions.
First, assuming this is an SP-initiated SAML flow from O365 to your local IdP, what beyond the Referer header would be unique? Where does the nameid come from in the SAML authnrequest?
Plus, assuming this is all HTTPS traffic, you may not be able to rely on the Referer header. The WEBSSO::select option is definitely the way to go here, but you need to be able to uniquely identify the requests.
