Policy rule using user device in an expression not working with VIP Authentication Hub

Products

• VIP Authentication Hub

Issue/Introduction

When running VIP Authentication Hub, and trying to create a Rule Policy to check the user device, with options other than Web from Channel, this is not working.

The Mobile or Custom Channel doesn't work.

Trying to use an Expression in the Policy Context, but there's no expression for device.

How to identify the device, by headers or other means?

 

Resolution

Writing a context expression based on the headers like User-Agent is not supported at the moment.

But, the useragent header can be passed as clientContext when calling "/auth/v1/authenticate".

Then, the useragent and its value will be available for expression evaluation in a Policy, when looking at the clientContext.

To illustrate:

When the useragent is passed in the clientcontext of the /authenticate call:

  "clientContext": [
          {
              "key": "useragent",
              "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15"
          }
      ]

In the future version after the 3.4, writing context expression based on the headers like User-Agent will be supported.