Script Transformer Action
A script transformer action transforms the input attribute names and values. The script transformer allows for any transformations imaginable as the incoming attributes is transformed programmatically through custom script procedures.
Transforming values using script procedures#
A procedure is basically a function providing a scripting context in which the incoming attributes are contained. These attributes may be transformed in any possible way, either statically or even by looking up data in external data sources or whatever other helpers are provided in the context.
Like other actions, this one is also able exclude certain attributes if so configured (see below).
For more information on scripting, see the scripting section in the documentation.
In its simplest form, a script transformer action procedure looks like the following:
The following configuration options are available:
| Configuration | Mandatory | Description |
|---|---|---|
transformation-procedure | yes | A reference to the actual procedure that should run |
excluded-attributes | no | Optional list of attributes that should be removed |
attributes-location | no | The source and destination location for the transformed attributes (subject-attributes, context-attributes, or action-attributes). |
Back-channel support#
This action can be used in back-channel authentication.