Exclude Attributes

Use exclude-attributes to specify the attributes to exclude from a JSON response.

Description Details

Description	Details
Applicable to	PERMIT decisions, although you cannot apply Exclude Attributes advice directly to a System for Cross-domain Identity Management (SCIM) search. Also, do not use this advice type with SCIM modifies. Instead, use the Modify SCIM Patch advice type.
Additional information	The payload for this advice is a JSON array of strings. Each string is interpreted as a JSONPath into the response body of the request being authorized. Each JSONPath can select multiple attributes in the object. The portions of the response that a JSONPath selects are removed before sending the response to the client. The following example instructs PingAuthorize Server to remove the attributes `secret` and `data.private`. ["secret","data.private"] For more information about the processing of SCIM searches, see Filter Response.

Applicable to

PERMIT decisions, although you cannot apply Exclude Attributes advice directly to a System for Cross-domain Identity Management (SCIM) search.

Also, do not use this advice type with SCIM modifies. Instead, use the Modify SCIM Patch advice type.

Additional information

The payload for this advice is a JSON array of strings. Each string is interpreted as a JSONPath into the response body of the request being authorized. Each JSONPath can select multiple attributes in the object. The portions of the response that a JSONPath selects are removed before sending the response to the client.

The following example instructs PingAuthorize Server to remove the attributes secret and data.private.

["secret","data.private"]

For more information about the processing of SCIM searches, see Filter Response.