For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

APM SAML IdP - SP Issuer Extraction

Problem this snippet solves: APM doesn't expose any detail about the SAML SP Issuer when authentication requests hitting APM as an IdP during an SP initiated SAMLRequest. This iRule when applied to...
Published Apr 06, 2016
Version 1.0
BIG-IP Access Policy Manager (APM)
devops
idp
iRules
saml
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Sep 11, 2019

Hello Nobby.

Thanks for sharing very usefull.

I used it on for Azure Office 365 Integration but I adapt it a little bit because the SAML Request does not contain "saml:issuer"

but instead "<issuer" so I have change the following line 

set SAML_Issuer_loc [string first "saml:issuer" [string tolower $SAMLdata]]

by the following line 

set SAML_Issuer_loc [string first "<issuer" [string tolower $SAMLdata]]

After that, I was able to extract the SAML SP "Issuer" value.

Regards