For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

THi_89722's avatar
THi_89722
Icon for Nimbostratus rankNimbostratus
Sep 23, 2016
Solved

SAML SLO NameQualifier and SPNameQualifier attributes missing

We have external SAML 2 IdP which requires NameQualifier and SPNameQualifier attributes in NameID element set in the SAML LogoutRequest (SLO), like: NameQualifier="https://xxx.yyy.com/idp" ...
application delivery
BIG-IP Access Policy Manager (APM)
saml
slo
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Nov 09, 2017

    Support for NameQualifier and SPNameQualifier is added in BIG-IP APM v13.1. This version will be released very shortly.

     

Michael_Koyfman's avatar
Michael_Koyfman
Icon for Cirrocumulus rankCirrocumulus
Sep 27, 2016

Can you please share which IDPs require the use of these attributes? They are optional attributes that are currently not supported by SLO configuration of APM. Please open a case with F5 support and request an RFE to support them, and provide as much information as possible, including the IDPs that use them(and any information as to why they are used). Thanks!

 

Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Jul 06, 2018

Is the Name-Identifier Policy Format available in version 13.1.0.8 I dont see this option but I need this setting to be on version 2.0. I do see the Service Provider Name Qualifier option.