Last active
March 23, 2018 14:54
-
-
Save CJHarms/7880a188f261f6ef59d47a4ec8d73f40 to your computer and use it in GitHub Desktop.
NetScaler O365 SAML AAA-TM Authentication Policies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| set authentication ldapPolicy auth_pol_LDAPS -Attribute1 mail -Attribute2 objectGUID | |
| add authentication samlIdPProfile auth_prof_saml_idp_Office365 -samlIdPCertName SAML-SigningCert -assertionConsumerServiceURL "https://login.microsoftonline.com/login.srf" -samlIssuerName "https://login.example.com/saml/login" -signatureAlg RSA-SHA256 -digestMethod SHA256 -audience urn:federation:MicrosoftOnline -NameIDFormat persistent -NameIDExpr "HTTP.REQ.USER.ATTRIBUTE(2).B64ENCODE" -Attribute1 IDPEmail -Attribute1Expr "HTTP.REQ.USER.ATTRIBUTE(1)" | |
| add authentication samlIdPPolicy auth_pol_saml_idp_Office365 -rule "HTTP.REQ.HEADER(\"Referer\").CONTAINS(\"https://login.microsoftonline.com/PostToIDP.srf\")" -action auth_prof_saml_idp_Office365 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment