Okta.Sdk.Model.PolicySubject

Specifies the behavior for establishing, validating, and matching a username for an IdP user

Properties

Name	Type	Description	Notes
Filter	string	Optional regular expression pattern used to filter untrusted IdP usernames. * As a best security practice, you should define a regular expression pattern to filter untrusted IdP usernames. This is especially important if multiple IdPs are connected to your org. The filter prevents an IdP from issuing an assertion for any user, including partners or directory users in your Okta org. * For example, the filter pattern `(\S+@example\.com)` allows only Users that have an `@example.com` username suffix. It rejects assertions that have any other suffix such as `@corp.example.com` or `@partner.com`. * Only `SAML2` and `OIDC` IdP providers support the `filter` property.	[optional]
MatchAttribute	string	Okta user profile attribute for matching a transformed IdP username. Only for matchType `CUSTOM_ATTRIBUTE`. The `matchAttribute` must be a valid Okta user profile attribute of one of the following types: * String (with no format or 'email' format only) * Integer * Number	[optional]
MatchType	PolicySubjectMatchType		[optional]
UserNameTemplate	PolicyUserNameTemplate		[optional]

[Back to Model list] [Back to API list] [Back to README]