Forum Discussion

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Sep 21, 2015

SAML: apm vpe action selection based on SP Issuer

hello I have the following scenario: APM as IdP (works as portal and SP-initiated), v12.0. Multiple SAML IdP resources are configured and showned to the users depending on their AD group membership...
BIG-IP Access Policy Manager (APM)
deployment
saml
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Sep 21, 2015

Hm... I am having hard time understanding why you would need to perform AD Query in a different way? If you can post an example, perhaps I can have any better idea. In general, it's not really possible to do, as the POST URL is the same, and AuthN request does not get parsed until the session is established - so you really need to perform all the checks upon session establishment with the IDP.