apm saml auth-context-class-list

apm saml auth-context-class-list(1)			BIG-IP TMSH Manual		       apm saml auth-context-class-list(1)

NAME
       auth-context-class-list - Configure a list of SAML authentication context classes.

MODULE
       apm saml

SYNTAX
       Configure the auth-context-class-list component within the saml module using the syntax shown in the following sections.

   MODIFY
	create auth-context-class-list [name]
	modify auth-context-class-list [name]
	  options:
	    app-service [[string] | none]
	    classes [add | delete | modify | none | replace-all-with] {
	       name [string] {
		   order [integer]
		   value [string]j
	       }
	    }
	    description [[string] | none]

	edit auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties

   DISPLAY
	list auth-context-class-list
	list auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	show running-config auth-context-class-list
	show running-config auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    app-service
	    non-default-properties
	    one-line
	    partition

   DELETE
	delete auth-context-class-list [name]

DESCRIPTION
       You can use the auth-context-class-list to create and manage lists of SAML authentication context classes. Each class in
       the list must contain a unique order and a unique value. Order indicates the relative level of security ranging from 1
       (least secure) to 255 (most secure).

EXAMPLES
       create sp_authn_ctx_classes_list classes add { password { order 1 value urn:oasis:names:tc:SAML:2.0:ac:classes:Password}
       kerberos { order 2 value urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos } }
	    Creates a new list named 'sp_authn_ctx_classes_list' with two authentication context classes: password and kerberos.
	    Higher order number implies higher security associated with class. In this example, the fact that the kerberos class
	    order is 2 implies that it has higher security than the password class with order 1.

       modify authentication_contexts_list classes add { SmartcardPKI { order 8 value
       urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI } }
	    Modifies default list of authentication context classes to include a class 'SmartcardPKI' with priority order '8' and
	    value 'urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI'.

       modify authentication_contexts_list classes delete { smartcard }
	    Removes authentication context class 'smartcard' from the default list of authentication context classes
	    'authentication_contexts_list'.

       list auth-context-class-list
	    Displays default list of authentication context classes.

OPTIONS
       app-service
	    Specifies the name of the application service to which the object belongs. The default value is none. Note: If the
	    strict-updates option is enabled on the application service that owns the object, you cannot modify or delete the
	    object. Only the application service can modify or delete the object.

       classes
	    Specifies a list of authentication context classes. Properties 'order' and 'value' must be unique within the auth-
	    context-class-list object. Property 'order' specifies the security of the class in the context of the BIG-IP system;
	    order ranges from the least secure '1' to the most secure '255'. Property 'value' specifies a URL of authentication
	    context class, for example, 'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos'.

       description
	    Specifies a unique description for the list of authentication context classes.

SEE ALSO
COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or by any means, electronic or mechanical, including
       photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal
       use, without the express written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2015. All rights reserved.

BIG-IP							    2015-11-11			       apm saml auth-context-class-list(1)