Forum Discussion

BenJ's avatar
BenJ
Icon for Nimbostratus rankNimbostratus
Jan 19, 2017

SAML Attributes Being Stripped with IdP Chaining

Hi all,   https://devcentral.f5.com/articles/apm-cookbook-saml-idp-chaining   Using the above article and a bunch of trial and error, I've successfully created an IdP chain. However, I'm having...
BIG-IP Access Policy Manager (APM)
security
BenJ's avatar
BenJ
Icon for Nimbostratus rankNimbostratus
Jan 19, 2017

Solved the problem:

 

Added the attributes to the internal IdP, as mentioned above, and then added APM variables as the attribute values.

 

eg. Attribute name=displayName, Value=%{session.saml.last.attr.name.displayName}

 

Worked a charm.