Generating an attribute - PingOne Cloud Platform - PingOne Services - PingOne Authorize

Generating an attribute - PingOne Cloud Platform - PingOne Services - PingOne Authorize - PingOne

PingOne Cloud Platform

bundle

pingone

ft:publication_title

PingOne Cloud Platform

Product_Version_ce

PingOne Cloud Platform

PingOne

category

Administratorguide

ContentType

Guide

Product

Productdocumentation

p1cloudplatform

ContentType_ce

Guide > Administrator Guide

Guide

Product documentation

Generate attributes to extract JSON schema properties from parent attributes. As example data, consider the following JSON passed in a decision request. The JSON represents a user in an external identity store.

{
"Id": "my-id",
"Ip": "217.145.198.92",
"Name": "John Smith"
}

You’ll create a parent attribute that stores the user information, then generate child attributes that extract properties.

Add an attribute that stores a JSON schema:
1. On the Attributes tab, click the + icon and select Add new attribute, then enter a name for the attribute, such as External User.
2. To define where the attribute pulls information from, click Resolvers, and then click + Add Resolver.
3. In the Resolver type list, select Request Parameter.
4. In the Value Settings section, select JSON in the Type list.
5. Use an online JSON schema generator to generate a schema for the example JSON that represents the external user.
```
{
  "$schema": "http://json-schema.org/draft-04/schema#",
  "type": "object",
  "properties": {
    "Id": {
      "type": "string"
    },
    "Ip": {
      "type": "string"
    },
    "Name": {
      "type": "string"
    }
  },
  "required": [
    "Id",
    "Ip",
    "Name"
  ]
}
```
6. Copy the resulting schema and enter it in the JSON Schema field.
  
  Tip:
  To edit large JSON objects more effectively, open the code editor by clicking .
7. Click Save Changes.
Generate attributes based on the defined JSON schema.

For example purposes, you’ll generate attributes for PingOne Risk connector service inputs.
1. Add a connector service for PingOne Risk. Enter a name, such as External User Risk, and then select the service type, and connector types.
2. In the Inputs section, click next to User ID, and then click the Select an attribute list.
3. Expand the External User parent attribute and select the Id property.
  
  If an attribute hasn’t been generated for a property yet, the property is grayed out. When you select a property, PingOne Authorize adds an attribute that resolves against the parent attribute and a processor that extracts the property.
4. For User Type, enter EXTERNAL.
5. For IP Address, select the External User > Ip property to generate an attribute.
6. Click Save changes.
  
  Generated attributes are nested under the parent attribute on the Attributes tab.
  
  Note:
  The generated attributes resolve against their parent attribute, as shown in the following image.