PingFederate Server

Configuring the Tag Authentication Selector

The Tag Authentication Selector lets you configure authentication policies and fragments to influence policy decisions based on tags applied to the resource.

Learn more in Tag Management.

Steps

  1. In the PingFederate admin console, go to Authentication > Policies > Selectors.

  2. On the Selectors screen, click Create New Instance.

Type tab

  1. In the Instance Name field, enter a name for the selector instance.

  2. In the Instance ID field, enter an ID for the selector instance.

    The instance ID is used to identify the selector instance in API requests.

  3. In the Type list, select Tag Authentication Selector.

  4. Click Next.

Authentication Selector tab

  1. Click Add a new row to 'Tags'.

  2. In the Select dialog, search or select the tag you want to add to the selector.

  3. Click Update to add the selected tag.

  4. In the Resource Type list, select the type of resource for this selector instance to evaluate.

  5. After you have added the tags you want, click Next.

Summary tab

  1. Review your selector and click Save.

Result

When you place this selector instance as a checkpoint in an authentication policy, it forms two policy paths: Yes or No.

If the invoking resource matches one of the tags from the set, the selector returns true. The policy engine regains control of the request and proceeds with the policy path configured for the result value of Yes.

If the invoking resource matches none of the tags in the set, the selector returns false. The policy engine regains control of the request and proceeds with the result value of No.