apm policy agent aaa-saml
apm policy agent aaa-saml(1) BIG-IP TMSH Manual apm policy agent aaa-saml(1)
NAME
aaa-saml - Manages a AAA SAML agent.
MODULE
apm policy agent
SYNTAX
Configure the aaa-saml component within the policy agent module using the following syntax.
CREATE/MODIFY
create aaa-saml [name]
modify aaa-saml [name]
options:
app-service [[string] | none]
attr-consuming-service-session-var ( | none)
attribute-consuming-service ( | none)
server ( | none)
DISPLAY
list aaa-saml
list aaa-saml [ [ [name] | [glob] | [regex] ] ... ]
show running-config aaa-saml
show running-config aaa-saml [ [ [name] | [glob] | [regex] ] ... ]
options:
all
all-properties
current-module
non-default-properties
one-line
app-service
partition
DELETE
delete aaa-saml [name]
DESCRIPTION
Use this command to create, modify, display, or delete a AAA SAML agent.
EXAMPLES
create aaa-saml Mysamlagent {server "companysaml"}
Creates a AAA SAML agent named Mysamlagent that is associated with the companysaml server.
list aaa-saml
Displays a list of AAA SAML agents.
delete aaa-saml Mysamlagent
Deletes the Mysamlagent AAA SAML agent.
OPTIONS
app-service
Specifies the name of the application service to which the object belongs. The default value is none.
Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
modify or delete the object. Only the application service can modify or delete the object.
attr-consuming-service-session-var
Specifies the session variable used as the source for the attribute consuming service index. The index
will be included in the SAML authentication request generated. The IdP maps the index to the list of
attributes derived from the metadata previously shared and returns those attributes in the SAML Response.
attr-consuming-service-session-var and attribute-consuming-service cannot be configured at the same time.
attribute-consuming-service
Specifies the name of one of the attribute consuming services associated with the server. The index
associated with the selected attribute consuming service will be included in the SAML authentication
request generated. The IdP maps the index to the list of attributes derived from the metadata previously
shared and returns those attributes in the SAML Response. attribute-consuming-service and attr-consuming-
service-session-var cannot be configured at the same time.
partition
Displays the partition within which the object resides.
server
Specifies the AAA SAML server that the system uses for SAML queries and authentication.
SEE ALSO
tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2017. All rights reserved.
BIG-IP 2017-02-03 apm policy agent aaa-saml(1)