Forum Discussion

Thomas_Schaefer's avatar
Thomas_Schaefer
Icon for Nimbostratus rankNimbostratus
Jan 31, 2019

Use iRules to validate signed payload

I am working on an Okta implementation for a website behind a BigIP. Note we do NOT have the APM so this is just LTM and any iRules I need to write.   The issue is I receive a message as a posted ...
application delivery
iRules
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Feb 01, 2019

Hi Thomas,

 

Am I on the right track?

 

Yes you are, but keep in mind that iRule has no buildin commands to parse your SAML data. So you would need to perform all the parsings and verifications manually (e.g. B64 decode, removing deflate compression, XML string parsings and finally dealing with the crypto stuff).

 

It would be much easier, to jump from your iRule into an iRuleLX name space and do this stuff with NodeJS. NodeJS has much more functionality when it comes so SAML, Deflate, XML etc.

 

Cheers, Kai