Forum Discussion
SSO Credential Mapping
Hi there
I would like some help to pre-populate the username field within the Browser Logon Page of my access policy.
At the moment the flow is SAML Auth > SSO Credential Mapping > Browser Logon Page
SAML Auth Authentication action is working (the F5 is setup as a Service Provider) and the variable I would like to assign is the subject name within the assertion.
I added an SSO Credential Mapping where the SSO Token Username is Custom mcget {session.saml.last.identity}
Within the Browser Logon Page, the first field is Type = Text, Post Variable Name = username, Session Variable Name = username, Read Only = Yes
No matter what I try I can't seem to prepopulate the username. I've tried setting the session variable name to session.logon.last.username or session.saml.last.identity but it won't let me commit the change. I get a Error saying that the value session.logon.last.username is invalid
I would appreciate anyones help
Thanks very much
Best Regards
Gary
1 Reply
- Greg_Crosby_319Historic F5 Account
I believe the syntax to grab a session variable is expr {"[mcget {session.variable}]"}, might be the syntax being used is incorrect. A visual way to see the session value during logon is by creating a message box in your VPE with %{session.variable} as the message. The variable value will be returned as a message during logon (nothing is returned if session variable is blank).
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com