Authenticators (exec_if)

Overview

With exec_if you can control if an authenticator should be executed or not.

Supported scopes are export, request and session.

Common examples

• The value in LOA must be less than 3 while spEntityID must contain a specific value
  "exec_if": "exports.LOA < 3 && exports.spEntityID === 'https://dev.fortifiedid.se/enrollment/'"

• distinguishedName must not contain a value
  "exec_if": "!exports.distinguishedName"

• spEntityID contains one of the following values
  "exec_if": "mv.containsAny(exports.spEntityID, 'https://dev.fortifiedid.se/pwdreset/', 'https://dev.fortifiedid.se/enrollment/')"

• Groups contains all of the following values
  "exec_if": "mv.containsAll(exports.groups, 'group1', 'group2', 'group3')"

• Tags - Any tag in the expression matching with what is in exports

  "exec_if": "mv.containsAny(exports.app_tag, 'bankid', 'bank_id', 'swedish_bankid')"

• Tags - All tag in the expression matching with what is in exports

  "exec_if": "mv.containsAll(exports.app_tag, 'bankid', 'bank_id', 'swedish_bankid')"