What request context attributes are available in Authentication and Authorization policies?

Questions OAuth/OIDC
1

Hey everyone,

I’m working on implementing custom rules in my access policies and need to understand what request context attributes are available for use in policy expressions.

What I’m trying to achieve: I want to create conditional access rules based on the incoming OAuth/OIDC request context in my authentication policy rules. Specifically, I’m looking to make authorization decisions based on various request parameters and context information.

My questions:

  1. What is the complete list of request.* attributes available in authentication access policy rules?

  2. Are OAuth parameters (state, redirect_uri, login_hint, scope, etc.) accessible in policy expressions?

2

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.