Shib and F5 VPN authorization

[Steven Carmody]

Hi,

I'm passing along a question from the local team that manages our F5 VPN 
service. We've been using Shib to access the VPN for a while.

However, they're looking for help and suggestions for retrieving the 
attributes from the SAML Assertion and using them -- here's what they say:

> Shib does provide the attribute but F5 cannot read it to authorize the user. We could create complicated custom irule to read the attributes from Shib. It is easier and cleaner to use the LDAP authorization existing module on F5. Please let me know if you know people from other schools who have created irules to read the attributes from Shib for authorization.
> 

Has any campus created the irules they're referring to, and would be 
willing to share a model ?

thanks very much !