...
- ANY - Always evaluates to true
- AND - Evaluates to true if all contained rules are true
- OR - Evaluated to true if any contained rule is true
- NOT - Evaluates to true if the contained rule evaluates to false
- AttributeRequesterString - Evaluates to true if the attribute requester's entity ID matches a given string
- AttributeIssuerString - Evaluates to true if the attribute issuer's entity ID matches a given string
- PrincipalNameString - Evaluates to true if the user's principal name matches a given string
- AuthenticationMethodString - Evaluates to true if the method used to authenticate the user matches a given string
- AttributeValueString - Evaluates to true if the value of a given attribute matches a given string
- AttributeScopeString - Evaluates to the true if the scope of a value of a given attribute matches a given string
- AttributeRequesterRegex - Evaluates to true if the attribute requester's entity ID matches a given regular expression
- AttributeIssuerRegex - Evaluates to true if the attribute issuer's entity ID matches a given regular expression
- PrincipalNameRegex - Evaluates to true if the user's principal name matches a given regular expression
- AuthenticationMethodRegex - Evaluates to true if the method used to authenticate the user matches a given regular expression
- AttributeValueRegex - Evaluates to true if the value of a given attribute matches a given regular expression
- AttributeScopeRegex - Evaluates to the true if the scope of a value of a given attribute matches a given regular expression
- Script - Evaluates a scriptlet to determine if the rule evaluates to true
- AttributeRequesterInEntityGroup - Evaluates to true if the attribute requester is defined within a given entity group in SAML metadata
- AttributeIssuerInEntityGroup - Evaluates to true if the attribute issuer is defined within a given entity group in SAML metadata
- AttributeIssuerNameIDFormatExactMatch - Evaluates to true if the metadata that a given name identifier format is supported by the attribute issuer.
- AttributeRequesterNameIDFormatExactMatch - Evaluates to true if the metadata that a given name identifier format is supported by the attribute requester.
- AttributeIssuerEntityAttributeExactMatch - Evaluates to true if an entity attribute of the issuer exactly matches a given value.
- AttributeRequesterEntityAttributeExactMatch - Evaluates to true if an entity attribute of the requester exactly matches a given value.
- AttributeIssuerEntityAttributeRegexMatch - Evaluates to true if an entity attribute of the issuer matches a given regular expression.
- AttributeRequesterEntityAttributeRegexMatch - Evaluates to true if an entity attribute of the requester matches a given regular expression.
- AttributeInMetadata - (V2.4.0+) Evaluates to true if a given attribute is found in the SP's metadata as a requested attribute.
...