Check Group Block

This block provides the ability to extract Group from request context and compare its value against a specified Group value.


Name

Specify the name for the block.


Description

Provide a description for this block.


What is the expected Group name? *

Specify the Group name that the extracted Group should be compared with.

Advanced Options


Where is the Group value Location? *

Select the Group attribute's location from one of the following options:

  • Headers (Default) - System will look for the group attribute in headers that are passed from resource server. The variable name that will be searched in headers for the value extraction is specified in field below.
  • Query Parameters - System will look for the group attribute in Query Parameters that are passed from resource server. The variable name that will be searched in query parameters for the value extraction is specified in field below.
  • Authorization Context - System will look for the group attribute in the authorization Context that is passed from resource server. The variable name that will be searched in authorization context for the value extraction is specified in field below.
  • Message Context - System will look for the group attribute in the current message context. The variable name that will be searched in message context for the value extraction is specified in field below.
  • AuthScope Data Services - System will look for the group attribute in AuthScope Data Store. The variable name that will be searched in AuthScope Data Store for the value extraction is specified in field below.
  • Others - This option can be used to specify the attribute location in the format specified in next field.
  • Value - Use this option if you would like to specify a hard coded value for group. The following field can be used to specify the value.

What is the name of the Attribute that holds the Group value? *

Specify the attribute name that should be selected from the location above if you selected one of the following options:

  • Headers
  • Query Parameters
  • Authorization Context
  • Message Context

If you selected the "Other" option in above field then enter the attribute value as follows:

Example Inputs Value selected
messageContext.allowedGroups.name {"messageContext": {"allowedGroups": {"name" : "teller"}}} teller
authzContext.amount {"authzContext": {"amount": 10000}} 10000

if you selected the "Value" option above then specify the hard coded attribute value here. Example administrators,operators etc.

The default value is "GROUP".


results matching ""

    No results matching ""