Assignment rules

The assignment rules support assigning resources (such as a credentials) to session variables.

• SSO Credential Mapping

• Variable Assignment

The following assignment rules are included with BIG-IP Next Central Manager.

SSO Credential Mapping

This rule caches the user name and password for use with single sign-on applications in the enterprise. This enables users to forward securely stored user names and passwords to applications and servers automatically, without having to input credentials repeatedly.

To create an Access policy with the SSO Credential Mapping rule, specify the SSO token username in the variables property. The SSO token username defines the SSO session variable for the user name source.

When you use this rule, you configure the following fields:

Field	Description
Name	Specify the name of the SSO credential mapping rule.
SSO Token Password	Select where to retrieve the password from and then specify the Session Variable that contains the password.
SSO Token Username	Select where to retrieve the username from and then specify the Session Variable that contains the username.

Variable Assignment

This rule allows you to effectively manage and manipulate data within a session. This feature is particularly useful when you are constructing intricate and dynamic rules for your application. Using variable references allows you to reuse the variable value in various branches and conditions, ultimately simplifying the process of maintaining and updating policy logic.

When you use this rule, you configure the following fields:

Field	Description
Name	Specify the name of the variable assign rule.
Variable	Specify whether to use a Custom or Predefined variable.
Per-Session Variables	If you selected Custom, type the name of the variable to which you want to assign a value. If you selected Predefined, select the name of the variable to which you want to assign a value.
Secure	Specify whether the variable is secure or unsecure. The value of a secure variable is not displayed in the session report, or logged by the logging rule.
Value	There are three values for this field: If you select Custom Expression, type in TcL code to define the value that you want to assign to the selected variable. If you select Session Variable select the name of the session variable that has the value that you want to assign to the selected variable. If you select Text, type in the text value that you want to assign to the selected variable.