Forum Discussion
SSO Resource Assignment
- Jul 28, 2016
Hi,
You can add an empty box and add branches where you check that session.assigned.resources and session.assigned.webtop are not empty.
Hi,
You can add an empty box and add branches where you check that session.assigned.resources and session.assigned.webtop are not empty.
Thanks, that does work if they are not a member of any SAML resource/WebTop. Do you know of a creative way to show a nice deny page if they match at least 1 SAML resource but not the one they are going to?
Example, they make it through the policy since they have at least 1 SAML resource, however, they did not initiate the SSO connection at this resource. Therefore, it's a page cannot be displayed or a long SSO error. Maybe an irule that captures general SSO failure?
Thanks, Mike
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com