Selector

The selector configuration allows for multiple authenticators to use the same listener (host and port). Requests are routed to authenticators based on the rules defined in the selector.

If a request matches multiple selectors; first match wins. If no selector is specified; first authenticator wins.

Matching can be done on sender host (name or ip) and on one or more attributes. For a selector to match, all specified expressions must match.

Expressions must conform with Java regular expression (regex) syntax.

Name
Description

host

Source host (sender) expression (regex).

attrs

List of attribute expression objects

attrs[*].name

Attribute name (Mandatory unless type is specified)

attrs[*].type

Attribute type (Mandatory unless name is specified)

attrs[*].value

Attribute value expression (regex)