Add a ‘Conditional Send After’ attribute

For more information on conditional attribute values, contact HID Global technical support.

  1. In the Dictionary Attributes list, select the attribute to be sent, then click >.

  2. Define the attribute’s Value or Parameter. Select one option only.
    • Select Value to set the attribute to a value. If the attribute has fixed values, select a value from the drop-down list. Otherwise, enter a value.

    • Select Parameter for data specific to a user in the LDAP, such as the callback number or an assigned IP address retrieved by the LDAP query.
      Enter a name for the parameter. You must be sure that you have retrieved this parameter through the LDAP query used for the group to which you want to apply this profile. See Create an LDAP Query and Create a Group Using LDAP Queries and Filters.

    Note: When a user connects, if you have defined the parameter’s value in the user’s group, then the Authorization profile returns this attribute and its value. If you have not defined the parameter at the group level, AAA Server ignores the attribute.

  3. Click Condition....

  4. To define the attribute as conditional, select Conditional "Send After" attribute.
  5. From the Attribute drop-down list, select the authentication request attribute to be checked.

  6. Select the Comparator:

    • Equal to - the received attribute value must be equal to the defined conditional value.
      This comparator can be applied to all types of attributes.
    • Starting with - the received attribute value must start with the defined conditional value.
      This comparator can only be applied to string and IP address attribute types.

  7. Enter the Value to which the received attribute value is compared.

    8. Note: The conditional Value is case-sensitive.

  1. Click OK.

     

    The attribute is displayed in the Send After section of the main attributes screen:

    • With a "V" in front of it (if you defined a value) or with a "P" in front of it (if you defined a parameter).
    • With "Yes" in the Cond. column to define the conditional status.
    • The conditional settings for the attribute are displayed underneath.

  2. To define the order in which the attributes are evaluated, use the  and buttons.

    The attribute to be verified first must be at the top of the list.

  3. Click Save.