Rules examples

This page contains a few useful Perl expressions you can use in your Handler rules, SAML/OIDC/CAS security rules, 2FA Activation rules, etc.

Session attributes are visible in the Manager's Session browser, any attribute you see there can be used in a rule!

• Restricting access to a single user:

$uid eq "dwho"
$uidNumber == 1000
$cn eq "Doctor Who"
$email eq "dwho@tardis.info"
etc.

• Restricting access to a group

defined $hGroups{'administrators'}

# 2.0.8 and higher only
inGroup('administrators')

• Combining multiple expressions

inGroup('timelords') and not $uid eq 'missy'

• Using Perl's regular expressions

$cn =~ /^Doctor.*/i
$email !~ /@spam.com$/

• Filtering on Authentication Level

$authenticationLevel >= 3

• Filtering on Authentication method

$_auth ne 'Demo'

• Comparing the IP address

$env->{REMOTE_ADDR} =~ /^10\./