PingGateway 2024.11

PingOneProtectFeedbackFailureFilter

Provides a feedback mechanism for actions that failed following risk evaluation with PingOne Protect. This filter registers its completion status (failure) with PingOne Protect.

Put this filter at a point in the route where PingGateway knows the definitive result of post-evaluation actions is failure. For example, add it to a chain just before the handler that runs on failure as shown in PingOne Protect integration.

Usage

{
  "name": string,
  "type": "PingOneProtectFeedbackFailureFilter",
    "config": {
      "pingOneService": PingOneService reference,
      "postEvaluationAssumedRiskLevel": configuration expression<string>
  }
}

Configuration

"pingOneService": Handler reference, required

The PingOneService to access the feedback endpoint in the PingOne environment.

If an error occurs with the request to the feedback endpoint, PingGateway passes to the next handler. The optional "postEvaluationAssumedRiskLevel" setting applies as configured.

"postEvaluationAssumedRiskLevel": configuration expression<string>, optional

A string to override the assumed risk level managed in the local session state.

PingGateway uses this during the "lowRiskEvaluationThrottlePeriod" defined in the PingOneProtectEvaluationFilter for the route to decide whether to make a risk evaluation request to PingOne Protect for the next incoming request.

One of:

  • low

  • medium

  • high

Default: don’t override the risk level in the session state.