Claim Rule Language
A lightweight domain-specific language (DSL) built into AD FS that uses a condition-implies-action syntax, used to write custom claim issuance transform rules and authorization rules.
Timeline (last 90 days)
The Claim Rule Language is a lightweight DSL built into AD FS that supports conditional judgments, querying attributes from Active Directory, and regular expression replacement of claim values, with the typical syntax being "condition => action", where the action can be issue, add, or issueStore.
The Claim Rule Language performs no compile-time checks; misspelled variable names, incorrect claim type URIs, or improper conditional expression syntax will cause rules to fail silently at runtime, i.e., the rules are saved but never trigger.
All Facts (2)
The Claim Rule Language is a lightweight DSL built into AD FS that supports conditional judgments, querying attributes from Active Directory, and regular expression replacement of claim values, with the typical syntax being "condition => action", where the action can be issue, add, or issueStore.
50%UnverifiedThe Claim Rule Language performs no compile-time checks; misspelled variable names, incorrect claim type URIs, or improper conditional expression syntax will cause rules to fail silently at runtime, i.e., the rules are saved but never trigger.
50%