apm saml auth-context-class-list

apm saml auth-context-class-list(1)		  BIG-IP TMSH Manual		  apm saml auth-context-class-list(1)

NAME
       auth-context-class-list - Configure a list of SAML authentication context classes.

MODULE
       apm saml

SYNTAX
       Configure the auth-context-class-list component within the saml module using the syntax shown in the following
       sections.

   MODIFY
	create auth-context-class-list [name]
	modify auth-context-class-list [name]
	  options:
	    app-service [[string] | none]
	    classes [add | delete | modify | none | replace-all-with] {
	       name [string] {
		   order [integer]
		   value [string]j
	       }
	    }
	    description [[string] | none]

	edit auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    non-default-properties

   DISPLAY
	list auth-context-class-list
	list auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	show running-config auth-context-class-list
	show running-config auth-context-class-list [ [ [name] | [glob] | [regex] ] ... ]
	  options:
	    all-properties
	    app-service
	    non-default-properties
	    one-line
	    partition

   DELETE
	delete auth-context-class-list [name]

DESCRIPTION
       You can use the auth-context-class-list to create and manage lists of SAML authentication context classes.
       Each class in the list must contain a unique order and a unique value. Order indicates the relative level of
       security ranging from 1 (least secure) to 255 (most secure).

EXAMPLES
       create sp_authn_ctx_classes_list classes add { password { order 1 value
       urn:oasis:names:tc:SAML:2.0:ac:classes:Password} kerberos { order 2 value
       urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos } }
	    Creates a new list named 'sp_authn_ctx_classes_list' with two authentication context classes: password
	    and kerberos. Higher order number implies higher security associated with class. In this example, the
	    fact that the kerberos class order is 2 implies that it has higher security than the password class with
	    order 1.

       modify authentication_contexts_list classes add { SmartcardPKI { order 8 value
       urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI } }
	    Modifies default list of authentication context classes to include a class 'SmartcardPKI' with priority
	    order '8' and value 'urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI'.

       modify authentication_contexts_list classes delete { smartcard }
	    Removes authentication context class 'smartcard' from the default list of authentication context classes
	    'authentication_contexts_list'.

       list auth-context-class-list
	    Displays default list of authentication context classes.

OPTIONS
       app-service
	    Specifies the name of the application service to which the object belongs. The default value is none.
	    Note: If the strict-updates option is enabled on the application service that owns the object, you cannot
	    modify or delete the object. Only the application service can modify or delete the object.

       classes
	    Specifies a list of authentication context classes. Properties 'order' and 'value' must be unique within
	    the auth-context-class-list object. Property 'order' specifies the security of the class in the context
	    of the BIG-IP system; order ranges from the least secure '1' to the most secure '255'. Property 'value'
	    specifies a URL of authentication context class, for example,
	    'urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos'.

       description
	    Specifies a unique description for the list of authentication context classes.

SEE ALSO
COPYRIGHT
       No part of this program may be reproduced or transmitted in any form or by any means, electronic or
       mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
       other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

       F5 Networks and BIG-IP (c) Copyright 2015. All rights reserved.

BIG-IP						      2015-11-11		  apm saml auth-context-class-list(1)