Novell ACCESS MANAGER 3.1 SP2 - POLICY GUIDE 2010 Manual page 42

Canonical Equivalence
Case Insensitive
Comments
Dot All
Multi-Line
Unicode
Unix Lines
For regular expression syntax information, see the Javadoc for java.util.regex.Pattern.
Value: Select Data Entry Field, then specify the name of an identity provider role. Other value types
are possible. Your policy requirements determine whether they are useful
Result on Condition Error: Specify what the condition returns when the comparison of the two
values returns an error rather than the results of the comparison. Select either False or True. If you
do not want the action applied when an error occurs, select False. If you want the action applied
when an error occurs, select True.
User Store Condition
The User Store condition allows you to assign a role based on the user store that was used to
authenticate the current user. The [Current] selection represents the user store from which the user
was authenticated. The other selections represent all of the configured user stores that can be used to
compare with [Current].
For example, if the configured user stores are eDir1 and AD1 and the current user is authenticated
from eDir1, then a selected user store of eDir1 would match and a selected user store of AD1 would
not match.
User Store: To compare the user store that the user used for authentication with a static value, select
Current. To compare a static value with what the user used, select a user store from the list.
If you have created more than one Identity Server configuration, select the configuration, then select
the user store. The name of the user store is displayed.
Comparison: Specify how the user store is compared to the data in the Value field. Select either a
string comparison or a regular expression:
Comparison: String: Specifies that you want the values compared as strings and how you
want the string values compared. Select one of the following:
Equals: Indicates that the values must match, letter for letter.
Starts with: Indicates that the User Store value must begin with the letters specified in the
Value field.
Ends with: Indicates that the User Store value must end with the letters specified in the
Value field.
Contains Substring: Indicates that the User Store value must contain the letters, in the
same sequence, as specified in the Value field.
Comparison: Regular Expression: Matches: Specifies that you want the values compared as
regular expressions.
42 Novell Access Manager 3.1 SP2 Policy Guide