For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

THi_89722's avatar
THi_89722
Icon for Nimbostratus rankNimbostratus
Feb 24, 2015

Multi-valued SAML attributes not supported - any ideas/workarounds?

Currently APM does not support multi-valued SAML attributes (multiple same attribute instances within SAML assertion (Bug ID 400726, SOL 14570).   Consider authentication and access control based ...
BIG-IP Access Policy Manager (APM)
cloud
design
microsoft
security
Daniel_W_'s avatar
Daniel_W_
Icon for Cirrus rankCirrus
Aug 17, 2015

Does anybody has new information on that? In 12.0, multi valued attributed are supported on IdP, but this won't help regarding THi's question. To deliver AD group information to SAML SP, memberOf variable could be used. This variable is single valued (each group is concatenated with a pipe symbol) and sent as one string to SAML SP, even on 12.0.