Using a contains operator in a policy expression

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

How can a contains operator be used in a policy expression?  The AdminUI seems to only allow 'IsTrue', 'IsFalse', or 'Equals'.

Environment

All

Resolution

You can use XPSExplorer to manually construct the needed policy expression to use a contains operator.

-Open XPSExplorer and enter the menu number corresponding to Policy (this is 144 on my 12.8.7 lab system, but may be different on other releases).
-Enter S to list all the policies.  Locate your policy and enter the corresponding number (you may need to build a filter to search for it if you have a large number of policies defined).
-Enter W to get a writable copy of the policy.
-Enter the number next to VariableExprString (it will likely be 11).
-Enter the needed string
-Enter U to update the record, then quit XPSExplorer.  Use the AdminUI to verify the expression is reflected in the policy.

You will need to create a Domain Variable from the Session Variable that exists for the user.  You can then specify the Domain Variable in the policy expression.  You will want an expression similar to:

(String(DomainVarName).includes("val2"))

This expression will evaluate whether the Domain Variable called DomainVarName contains the value 'val2' and set the result to either true or false.  A true result will allow the user access to the policy while a false result will deny access.