PingAccess

Adding rule set groups

Add a new rule set group in PingAccess.

Steps

  1. Click Access and then go to Rules → Rule Set Groups.

  2. Click Add Rule Set Group.

  3. In the Name field, enter a name for the rule set group.

    Special characters and spaces are allowed.

  4. Select the Success Criteria:

    1. To require all rules in the set to succeed, select All.

      When Success Criteria is set to All, the first rule in the set that fails establishes the error handling.

    2. To require only one of the rules in the set to succeed, select Any.

      When Success Criteria is set to Any, the first rule set establishes the error handling and is flagged with a tool tip that displays a message indicating that.

      PingAccess flags processing rules in a rule set group with a tool tip that warns if the first rule in the list succeeds, additional rules will not be processed. This is considered a misconfiguration because in an Any rule set group, the first processing rule should succeed, causing all other rules in the set to not be evaluated.

    If you want to use processing rules on protected applications and handle access control decisions using Any criteria, assign processing rules directly to the application, or create a separate rule set group for the processing rules using the All criteria.

  5. To add one or more rule sets or rule set groups, select Rule Sets or Rule Set Groups and drag them from the available list to the selected list.

  6. To configure rule set hierarchy, drag rule sets into the rule set group.

    Processing occurs from top to bottom. The configuration is automatically saved.

  7. To save the rule set group, click Save.