Forum Discussion

1tuh3_243099's avatar
1tuh3_243099
Icon for Nimbostratus rankNimbostratus
Feb 05, 2016

AD Query - APM SAML

I'm just fiddling around in our lab F5 and trying to get the F5 (IDP) to authenticate a user based on credentials grabbed using the windows inspector (currenty logged on user)

 

I'm at the point where I was able to assign the user to a session variable however; how do I go about querying AD against the session variable which now hold the currently logged in user that I grabbed from the windows inspector and retrieve attributes such as email address etc..?

 

The reason I'm doing this is the SP requires the email address for the saml insertion and not the username

 

APM
application delivery
saml

3 Replies

Sort By
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Feb 05, 2016

    Just do AD Query - that is it. If the user session variable is populated, it will automatically query AD for attributes of that username(samaccountname by default, i assume you should be fine there, else you can put in search filter in the AD Query).

     

  • 1tuh3_243099's avatar
    1tuh3_243099
    Icon for Nimbostratus rankNimbostratus
    Feb 05, 2016

    Ok maybe the simplicity is what is throwing me off, I thought I would of had to pass my custom variable in the searchfilter because the user session variable is not populated

     

    For example

     

    session.customvar is populated with jsmith

     

    in the searchfilter in AD Query would the following work (typing this out on my mobile)

     

    %{session.customvar}

     

  • moureg16's avatar
    moureg16
    Icon for Cirrus rankCirrus
    Oct 10, 2018

    I’m working on using F5 as a SAML idP and I need to emulate a SaaS as SP. I faced a lack of knowledge a round related to how to create such lab “the application demo” to use it as a SP