F5 APM dynamic IdP assignment

tmsh list ltm data-group internal hostname-idp
ltm data-group internal hostname-idp {
    records {
        f5idp2.host.eu {
            data /Common/f5idp2
        }
        f5idp.host.eu {
            data /Common/f5idp
        }
    }
    type string
}



when ACCESS_ACL_ALLOWED {
 set host [ACCESS::session data get "session.server.network.name"]
 log local0. "IdP host : $host"

 set sso_conf [class lookup $host "hostname-idp"]
 log local0. "IdP SSO config: $sso_conf"
 if {$sso_conf != ""} {
   WEBSSO::enable
   WEBSSO::select $sso_conf
  }  else {
   log local0. "Unable to find matching IdP for $host on the hostname-ipd datagroup"
   ACCESS::session remove
 }
 unset host
 unset sso_conf

}