Forum Discussion
Pulling Group Attribute via Authentication Rules
I've had several prospects ask for the ability for BIGIP not only to authenticate against an external device (AD, Radius, LDAP) but also have the ability to extract/store group attributes so that we c...
Some further updates from developers on 2 above:
- A rule can query a profile attribute with the syntax:
PROFILE::
- In the case where authentication fails, and one wants to redirect to some error pages, he just needs to change the HTTP action upon failure, responding 3xx with a proper header. The redirection URL should be outside of that virtual, otherwise, he will hit this rule again, i.e. change HTTP::respond 401 to be:
HTTP::respond 303 Location http://new-URL/
Loc
