Forum Discussion

Cirrus

Aug 14, 2014

Solved

SAML SLO request ignored on iRules

Hello all, the F5 still doesn't pass the relay state on single logout (see https://devcentral.f5.com/questions/saml-logout-relaystate), I've tried to go around using an iRule (store the RelayState ...

Yann_Desmarest_
Aug 26, 2014
You can define a layered VS that apply your irule :

Change the IP address of your current VS (for example: 1.1.1.1) and remove your irule

Create a new VS (with published IP) and add your irule.

just add
virtual /Common/Internal_VS
to the end of the HTTP_REQUEST event of your irule (where Internal_VS is your VS with IP 1.1.1.1)

Thus, you will be able to manipulate REQUEST and RESPONSE (HTTP_RESPONSE) without any issues.

Yann_Desmarest

Cirrus

Aug 26, 2014

You can define a layered VS that apply your irule :

Change the IP address of your current VS (for example: 1.1.1.1) and remove your irule
Create a new VS (with published IP) and add your irule.
just add
```
virtual /Common/Internal_VS
```
to the end of the HTTP_REQUEST event of your irule (where Internal_VS is your VS with IP 1.1.1.1)

Thus, you will be able to manipulate REQUEST and RESPONSE (HTTP_RESPONSE) without any issues.