For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Format objectGUID attribute from hexadecimal to bindable string (hyphen-separated format)

Code is community submitted, community supported, and recognized as ‘Use At Your Own Risk’.

Short Description

Format objectGUID attribute from hexadecimal to bindable string (hyphen-separated format)

Problem solved by this Code Snippet

Claims recipients might require an Active Directory objectGUID to be represented as a bindable string (hyphen seperated format). 

The code snippet will help you to f
ormat the received objectGUID attribute from Active Directory from hexadecimal format "0xDE96F75DA1E135438C0F229A952D1432" to bindable string format "5df796de-e1a1-4335-8c0f-229a952d1432"

How to use this Code Snippet

In the VPE:

  • add a "Variable Assign" item after the "AD Query" or "LDAP Query" used to get the "objectGUID" attribute
  • in the left-side choose "custom variable" and choose a variable name. For example "session.sso.token.custom.formatedObjectGUID"
  • in the righ-side choose "custom expression" and paste the code below

Code Snippet Meta Information

  1. Version:1.0
  2. Coding Language:TCL

Full Code Snippet

 

 

 

 

set hexGUID [mcget {session.ad.last.attr.objectGUID}]
set substr1 "[string range $hexGUID 8 9][string range $hexGUID 6 7][string range $hexGUID 4 5][string range $hexGUID 2 3]"
set substr2 "[string range $hexGUID 12 13][string range $hexGUID 10 11]"
set substr3 "[string range $hexGUID 16 17][string range $hexGUID 14 15]"
set substr4 "[string range $hexGUID 18 21]"
set substr5 "[string range $hexGUID 22 33]"
return "[string tolower "$substr1-$substr2-$substr3-$substr4-$substr5"]"

 

 

 

 

Published Oct 04, 2023
Version 1.0
No CommentsBe the first to comment