Last Modified: Jun 11, 2026
Affected Product(s):
BIG-IP (all modules)
Known Affected Versions:
17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6
Opened: Dec 30, 2025 Severity: 3-Major
SAML authentication fails when the <AttributeValue> contains a black circle character (?).
Users affected by this issue are unable to authenticate via SAML and are denied access. Notably, other non-ASCII characters (such as Japanese) do not cause this problem.
Occurs when AzureAD user group names include the black circle character in SAML assertions processed by BIG-IP APM as SAML SP.
NA
None