F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Samuel_Rydén's avatar
Samuel_Rydén
Icon for Altocumulus rankAltocumulus
Dec 08, 2022

tcl logic in SAML Attribute value field possible?

Hi. We're running BigIP as a SAML IDP. Can I somehow issue tcl logic in a SAML attributes? I'm talking about the Access ›› Federation : SAML Identity Provider : Local IdP Services, editing an obje...
federation
idp
irule
saml
security
tcl
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 08, 2022

Hi Samuel,

It would honestly make me wonder if you could write native TCL syntax into these fields. 

You will most likely be forced to build the Role value within VPE. ASSERT::saml would be a choice to, but VPE makes somehow more sense for this static Role=Group match assertion thingy...

If nobody else responding to this question and bringing up some insights, you may contact F5 support to get sure. Please leave us a line what the outcome was... 😉

Cheers, Kai

Samuel_Rydén's avatar
Samuel_Rydén
Icon for Altocumulus rankAltocumulus
Dec 14, 2022

Thanks Kai,

I will contact F5 support to make sure, perhaps whine a little if it's not supported, and report back here with my findings.

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Dec 14, 2022

    Do this. A little whine helps a lot... 😉

    Cheers, Kai