For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MC_273315's avatar
MC_273315
Icon for Cirrus rankCirrus
Jul 27, 2016
Solved

SSO Resource Assignment

I recently have multiple SP SSO connections working in the same Access Profile. This works as the user navigates to whichever resource they are requesting. The SAML resources are valued in 'LDAP Grou...
BIG-IP Access Policy Manager (APM)
security
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Jul 28, 2016

    Hi,

     

    You can add an empty box and add branches where you check that session.assigned.resources and session.assigned.webtop are not empty.

     

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Jul 28, 2016

Hi,

 

You can add an empty box and add branches where you check that session.assigned.resources and session.assigned.webtop are not empty.

 

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Jul 28, 2016

Unfortunately, you may encounter this error and the user receive a tcp reset. In v12.1.0, several cases have been fixed but as I said, the best at the moment is to define a datagroup containing allowed SP connectors and trap the SAMLRequest, decode it, retrieve the SAML SP identifier and execute a lookup against the datagroup.