PingAuthorize

Include Attributes

Use include-attributes to limit the attributes that a JSON response can return.

Description Details

Applicable to

PERMIT decisions, although you cannot apply Include Attributes statements directly to a SCIM search.

Also, do not use this statement type with SCIM modifies. Instead, use the Modify SCIM Patch statement type.

Additional information

The payload for this statement is a JSON array of strings. Each string is interpreted as a JSONPath into the response body of the request being authorized. The response includes only the portions that one of the JSONPaths selects. When a single JSONPath represents multiple attributes, the response includes all of them. If the policy result returns multiple instances of Include Attributes statements, the response includes the union of all selected attributes.

For more information about the processing of SCIM searches, see Filter Response.