Clearlogin Directory Filters

Follow

As discussed in the article "Creating Access Rules," search filters are necessary for defining classifications of users that an Access Rule will apply to.

One type of search filter is a Clearlogin Directory (CLD) Filter, which is necessary for applying attributes to Clearlogin Directory users (or "people") in a more granular fashion than just using Groups.  These attributes can be used to help apply Access Rules to users.

A CLD Filter has two variables, the CLD Attribute Name and the CLD Attribute Value: 


 

The best way to describe how these two variables work together is to describe the CLD Attribute Name as the "Who" or "What" and the CLD Attribute Value as the "This."

For example, if you wanted to define associations for a Person in your Clearlogin Directory, you would do the following:

  1. Log into https://admin.clearlogin.com and on the left sidebar, select People and then click on Manage.



  2. Find your person either by searching through the alphabetized list, or by using the search bar located near the top of the page, and then click on the blue edit person button on the right.



  3. You should now be at the person's configuration page.



    Here you can define a CLD Attribute Name and CLD Attribute Value by clicking on one of the blue buttons at the top:

    A. The blue button that says text will allow you to define one CLD Attribute Name and one CLD Attribute Value.



    In this case, the CLD Attribute Name (who/what) is "student" and the CLD Attribute Value (this) is "sophomore.  Hence, "student is sophomore."

    Once you are done, click on the green button that says Save, you will be brought back to a summary page of your person.



    B. The blue button that says List will allow you to define one CLD Attribute Name and multiple CLD Attribute Values.



    Spaces are allowed in CLD Attribute Values (as well as in CLD Attribute Names), so in order to denote multiple CLD Attribute Values, typing a comma or pressing enter after each one is easiest.  You can also click on the CLD Attribute Value as it populates beneath the text box.



    Once you are done, click on the green button that says Save, you will be brought back to a summary page of your person.



    C. The blue button that says Checkbox will allow you to define one CLD Attribute Name and one CLD Attribute Value which can either be true or false.



    A checked checkbox means true and an unchecked checkbox means false.  In the case of the screenshot above, "sophomore is true."

    Once you are done, click on the green button that says Save, you will be brought back to a summary page of your person.



    D. You are welcome to use the Text, List and Checkbox functions as many times as you want in any combination.





    Of course you may always remove Text Boxes, List Boxes and Checkboxes by clicking on the red X button next to them.

  4. Now that you have defined CLD Attribute Names and CLD Attribute Values for your users, you're ready to apply them to your Access Rules!

    Begin by creating a new Access Rule as described here.

  5. Under Whoclick on the purple plus button that says Clearlogin Directory Filter.



    You will now have two text fields, one for filling in a CLD Attribute Name and one for filling in a CLD Attribute Value.  You may only enter one of each type per text box, however you may add multiple CLD Filters.

    Checkboxes' CLD Attribute Value can only be defined as true (if the checkbox is checked) or False (if the checkbox is not checked).

    The below Access Rule applies to our example student account, since one or more of the Access Rule's criteria matches one of more of the example student account's CLD Attribute Names and CLD Attribute Values.



    In the next example, none of the CLD Filter criteria matches our example student account, so the access rule does not apply.



    You can of course remove any CLD Filter by clicking on the corresponding red X button.

  6. Click on the green button that says Save Access Rule when you're done.  You will be brought back to the Access Rules page and you will see your new Access Rule in the list.

    Under Who the CLD Attribute Names and CLD Attribute Values are listed, which again shows how the CLD Attribute Name is the "who/what" and how the CLD Attribute Value is the "this."



  7. You have successfully created an Access Rule using a CLD Filter!  Please note that you can use any combination of CLD Filters and LDAP Filters when creating an Access Rule if you have at least one of each Identity Source type.
Have more questions? Submit a request

Comments

Powered by Zendesk