Authenticators (exec_if)

Authenticators that supports exec_if

Overview

With exec_if you can that control if a authenticator should be executed or not.

Supported scopes are export, request and session.

Common examples

  • The value in LOA must be less than 3 while spEntityID must contain a specific value "exec_if": "exports.LOA < 3 && exports.spEntityID === 'https://dev.fortifiedid.se/enrollment/'"

  • distinguishedName must not contain a value "exec_if": "!exports.distinguishedName"

  • spEntityID contains one of the following values "exec_if": "mv.containsAny(exports.spEntityID, 'https://dev.fortifiedid.se/pwdreset/', 'https://dev.fortifiedid.se/enrollment/')"

  • Groups contains all of the following values "exec_if": "mv.containsAny(exports.groups, 'group1', 'group2', 'group3')"

Last updated