Add Claims Value transformation

This transformation page enables the addition of extra values to a token's claims.

Regardless of the structure of the claim set at this stage in the pipeline, this transformation object ensures that its designated values are incorporated into the final claim set.

add-value2.png

add-value.png

add-value3.png

The Transformation consists of the following sections:

Claim Transformation Name: Give the Transformation object a name that will make it easy to recognize when adding to the pipelines of Authentication and Protocol Connections.

Culture: Because the expression might be using and comparing numbers, it is important for the system to know which culture is used in order to know whether a comma or a dot indicates a decimal point. Currently, only two cultures are supported, Danish (a comma is a decimal point) and American (a dot is a decimal point). These should cover the needs of other cultures in regard to this issue.

Owner Organization: This represents the organization that the Claim Transformation is added to.

Execute before loading claims from local store: By default, a Claim Transformation rule is executed after claims from the local store are loaded for a principal. Check this option to let it execute before the load.

Conditions: It is possible to specify that the Transformation object is only applied to a pipeline given certain conditions of the token or user are in place. Conditions include:

  • The option to skip the Transformation step when the token belongs or does not belong to a user identified as existing in the Safewhere Identify repository.
  • The option to specify that the Transformation object is not applied when the token is processed via a specific Authentication Connection or Protocol Connection.
  • The option to specify regular expressions that define which tokens are to be exposed to the Transformation step. Please see the Using Regular Expressions in Claim Transformation Conditions section to learn more.

Add Claim Value Transformation: This represents the specific values that will be added to claims of a token when passing by this step. The values will always be an addition to the existing values for a token's claims rather than overwriting them. If, for example, the email claim already has a value for the token before reaching this Transformation object and another value is stated in the object, then the token will have two values for the email claim after this step.