For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ty_John's avatar
Ty_John
Icon for Nimbostratus rankNimbostratus
Mar 26, 2020

Programatically configure SAML attributes using an iRule

I have a requirement to send user "roles" based on AD group membership and add these roles as multiple values to a single SAML attribute. Currently we have all roles in a single string separated by...
application delivery
BIG-IP Access Policy Manager (APM)
saml
Ty_John's avatar
Ty_John
Icon for Nimbostratus rankNimbostratus
Mar 27, 2020

Never mind. I just realised that separating by "|" actually does produce multiple values. I must have been having some other issue causing it to not work under certain use cases.

Nolan_Jensen's avatar
Nolan_Jensen
Icon for Cirrostratus rankCirrostratus
Aug 09, 2022

Ty_John,

Can you provide me a screen shot of how you were able to use | to seperate multiple saml attributes?  I have tried to do so many times in the place you have in your screen shot but will not seperate them like it says it should.

Thanks