hello I have the following scenario: APM as IdP (works as portal and SP-initiated), v12.0. Multiple SAML IdP resources are configured and showned to the users depending on their AD group membership. For SP-initiated sessions, I need to perform an AD query in a different way, depending on the SP re…

Hm… I am having hard time understanding why you would need to perform AD Query in a different way? If you can post an example, perhaps I can have any better idea. In general, it’s not really possible to do, as the POST URL is the same, and AuthN request does not get parsed until the session is estab…

This is what I meant: SP-initiated redirect POST to my VS (SAML IdP). A session is established and APM should see the AuthnRequest with Issuer ID. I do then have a logon page and then an ADquery. I would need to do some post-processing but only for one specific IssuerID and not in all cases.

cannot use the landing URI to distinguish the source (SAML SP initiator), as the landing URI variable is set to /saml/idp/profile/redirectorpost/sso .. which is the same for all SP services

Found out there is an existing RFE: 506014 [RFE][SAML] IdP should be able to parse 'AuthnRequest' before executing access policy (SP initiated SSO/ECP) No target defined, so please feel free to open a case and attach it to this BUGID to “speed up” its implementation :wink: Alex

+1 would also like this. I was thinking you could probably achieve this with an irule that captures the POST request to /saml/idp/profile/redirectorpost/sso and looks for the issuer. You could then set that as a variable to use in the Access Policy.

Hello guys, To have a workaround you can use the following code [image] APM SAML IdP - SP Issuer Extraction Articles Community CodeShare …

SAML: apm vpe action selection based on SP Issuer

Forums Technical Forums

Jad_Tabbara_J1 September 11, 2019, 8:11am 7

Hello guys,

To have a workaround you can use the following code

Regards

Jad

Topic		Replies	Views
APM SAML IdP - SP Issuer Extraction Community CodeShare irules , devops , big-ip-access-policy-manager-apm , idp , saml	8	1912	June 24, 2026
Sharing User Credentials Between SAML IDP and SP Policies in F5 APM Community CodeShare sso , apm , saml	3	726	December 13, 2025
Is there an APM SAML error legend or documentation? Technical Forums application-delivery , security , big-ip-access-policy-manager-apm	5	1561	February 5, 2025
APM Cookbook: SAML IdP Chaining F5 Technical Articles security , big-ip-access-policy-manager-apm , microsoft , idp , saml , sp , adfs , o365	7	5270	December 5, 2024
f5 BIG IP APM Show where a SAML Request from Technical Forums application-delivery	3	754	November 22, 2022

SAML: apm vpe action selection based on SP Issuer

Related topics