Find the policy names contain IDP from ssg database

Products

• CA API Gateway

Issue/Introduction

Are there any steps to follow to find out which policies have reference to a specific identity provider?

How can we determine which policies are using TLS 1.1 or 1.0 within a routing assertion ?

Environment

Release : 10.1

Resolution

1. To find the policies contains any IDP, 

select name from policy where xml like '%L7p:IdentityProviderOid%';

 

2. To find the policies contains specific IDP, 

On policy manager, highlight the authentication assertion, and then copy it, paste it to a text editor, there should be a line as below,

<L7p:IdentityProviderOid goidValue="xxxxxxxxxx"/>

The xxxxxxxxxx is the goid of the IDP, then search this IDP with SQL below,

select name from policy where xml like '%xxxxxxxxxx%';

 

3.  To find the specified TLS 1.x version in route assertion, 

select name from policy where xml like '%L7p:TlsVersion stringValue=\"TLSv1%';