Class AttributePropagationSettings
Configuration for propagating attributes to applications protected by IAP.
Implements
Inherited Members
Namespace: Google.Apis.CloudIAP.v1.Data
Assembly: Google.Apis.CloudIAP.v1.dll
Syntax
public class AttributePropagationSettings : IDirectResponseSchema
Properties
ETag
The ETag of the item.
Declaration
public virtual string ETag { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
Enable
Optional. Whether the provided attribute propagation settings should be evaluated on user requests. If set to true, attributes returned from the expression will be propagated in the set output credentials.
Declaration
[JsonProperty("enable")]
public virtual bool? Enable { get; set; }
Property Value
| Type | Description |
|---|---|
| bool? |
Expression
Optional. Raw string CEL expression. Must return a list of attributes. A maximum of 45 attributes can be
selected. Expressions can select different attribute types from attributes: attributes.saml_attributes,
attributes.iap_attributes. The following functions are supported: - filter .filter(, ): Returns a subset
of where is true for every item. - in in: Returns true if contains. - selectByName
.selectByName(): Returns the attribute in with the given name, otherwise returns empty. - emitAs
.emitAs(): Sets the name field to the given for propagation in selected output credentials. - strict
.strict(): Ignores the x-goog-iap-attr- prefix for the provided when propagating with the `HEADER` output credential, such as request headers. - append `.append()` OR `.append()`: Appends the provided or
to the end of. Example expression: attributes.saml_attributes.filter(x, x.name in ['test']).append(attributes.iap_attributes.selectByName('exact').emitAs('custom').strict())
Declaration
[JsonProperty("expression")]
public virtual string Expression { get; set; }
Property Value
| Type | Description |
|---|---|
| string |
OutputCredentials
Optional. Which output credentials attributes selected by the CEL expression should be propagated in. All attributes will be fully duplicated in each selected output credential.
Declaration
[JsonProperty("outputCredentials")]
public virtual IList<string> OutputCredentials { get; set; }
Property Value
| Type | Description |
|---|---|
| IList<string> |