Returns a page of accounts. Pass pageToken from the previous response’s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.
Opaque page token from the previous response's nextPageToken. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.
Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.
Opaque token for the next page; pass it back as pageToken. Present whenever more pages remain, including when this page is empty because the results are still being prepared, and absent only once the collection is fully returned. Do not parse or construct it.
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Oleria Identity Security","colors":{"primary":"#027864","light":"#027864","dark":"#58D5BA"},"logo":{"light":"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d","dark":"https://mintcdn.com/oleria/9Xgkiz4uBKa5_MIM/images/Oleria_Dark_2.png?fit=max\u0026auto=format\u0026n=9Xgkiz4uBKa5_MIM\u0026q=85\u0026s=eed2ceca9aaaa1597123d7edabce3ce2"},"favicon":"https://mintcdn.com/oleria/rpFX8xIzvg2xF0B0/images/favicon.png?fit=max\u0026auto=format\u0026n=rpFX8xIzvg2xF0B0\u0026q=85\u0026s=b2b79fcf5eaf05bffa7866fe11571fd9","appearance":{"default":"light"},"background":{"color":{"light":"#ffffff"}},"navbar":{"links":[{"href":"mailto:support@oleria.com","label":"Support"}]},"footer":{"socials":{"website":"https://oleria.com"}},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"oleria","hasAudioNarration":false,"actualSubdomain":"oleria","customDomains":["docs.oleria.com"],"gitSource":{"type":"github","owner":"roanokedatasecurity","repo":"oleria-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aead2ddcd71ec77215afae7","collectionId":"2eeb67ad-36d8-41f7-af9a-c2bb635cdfb4","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aead2ddcd71ec77215afae7"},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6aead2ddcd71ec77215afae7","clientVersion":"0.0.4054","searchFilterCounts":[{"language":"default","tag":"Integrations","count":370},{"language":"default","tag":"Applications","count":312},{"language":"default","tag":"API Reference","count":91},{"language":"default","tag":"Inventory \u0026 Actions","count":72},{"language":"default","tag":"Product","count":69},{"language":"default","tag":"Security and compliance","count":52},{"language":"default","tag":"Developer tools","count":48},{"language":"default","tag":"Collaboration and productivity","count":39},{"language":"default","tag":"Data and analytics","count":34},{"language":"default","tag":"Finance and operations","count":29}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true,"deflection":{"enabled":true,"email":"support@oleria.com","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/accounts/list","slug":"/api-reference/accounts/list","pageMetadata":{"title":"List","description":"Returns a page of accounts. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts","href":"/api-reference/accounts/list","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_components.p, {\n children: [\"Returns a page of accounts. Pass \", _jsx(_components.code, {\n children: \"pageToken\"\n }), \" from the previous response’s \", _jsx(_components.code, {\n children: \"nextPageToken\"\n }), \" to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no \", _jsx(_components.code, {\n children: \"nextPageToken\"\n }), \". Requires the \", _jsx(_components.code, {\n children: \"https://devx.{environment}.oleria.io/read\"\n }), \" scope.\"]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"List","description":"Returns a page of accounts. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts","href":"/api-reference/accounts/list","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"summary":"List","description":"Returns a page of accounts. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","operationId":"ListAccounts","tags":["Accounts"],"parameters":["f276cf35-a48a-479b-bb6c-681d1a79750f","e66a51a7-a0f0-4730-b4ba-6c16b531edd3","62a60e14-6e76-46f9-a8ea-527e9f7ff7ce"],"security":["7eebc22f-4ea3-4fe5-9436-4e71c422e305"],"responses":{"200":"95e55e3f-312a-4c7a-9ba5-02b37336d695","400":"5b0414a9-1f0d-4add-98a3-98395639d4c6","401":"1c6ebda2-74d2-43d2-abeb-ecf691db1270","403":"533921db-e89a-4668-beb7-019b07308107","429":"d7cb987a-5e3c-4241-ae84-e250630af0e3","500":"3d7fc8bc-5923-4d76-906c-7c6807deb94a"},"method":"get","type":"path","servers":["7524c4d0-f52d-433a-b349-e1a06ce637b4"],"path":"/v1/accounts","baseUrlOptions":["https://devx.{environment}.oleria.io"],"title":"List","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"f276cf35-a48a-479b-bb6c-681d1a79750f":{"name":"pageSize","in":"query","description":"Maximum items per page.","schema":{"type":"integer","format":"int32","default":50,"minimum":1,"maximum":200,"description":"Maximum items per page.","uniqueKey":"","typeLabel":"integer\u003cint32>"}},"e66a51a7-a0f0-4730-b4ba-6c16b531edd3":{"name":"pageToken","in":"query","description":"Opaque page token from the previous response's `nextPageToken`. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.","schema":{"type":"string","description":"Opaque page token from the previous response's `nextPageToken`. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.","uniqueKey":"","typeLabel":"string"}},"62a60e14-6e76-46f9-a8ea-527e9f7ff7ce":{"name":"applicationInstanceId","in":"query","description":"Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.","schema":{"type":"string","format":"uuid","description":"Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.","uniqueKey":"","typeLabel":"string\u003cuuid>"}}},"responses":{"95e55e3f-312a-4c7a-9ba5-02b37336d695":{"description":"A page of accounts.","content":{"application/json":{"schema":{"type":"object","required":["items"],"properties":{"items":{"type":"array","items":{"type":"object","description":"An Oleria Account object represents a user, machine, or token account in an enterprise SaaS application, identity provider, MFA provider, or directory service e.g. Okta, PingOne, ActiveDirectory, GitHub, Salesforce, or ServiceNow\n","required":["oleriaObjectMetadata","enrichedMFAStatus","enrichedNormalizedEmail","enrichedSharingRiskCategory","globalId","accountRole","alias","authenticationFunctions","email","enabled","hasAPIAccess","id","isAdmin","mfaRequirements","objectMetadata","ssoRequirements","subType","type"],"properties":{"accountRole":{"type":"string","description":"The source application-specific role associated with the account e.g. member, admin, etc. This preserves the underlying information used to determine __type__ and __userType__ of the account, and is referenced when doing identity provider assignment\n","example":"MEMBER","isRequired":true,"uniqueKey":"\\items.items.[INDEX].accountRole","typeLabel":"string"},"alias":{"minLength":1,"type":"string","description":"The username associated with the account in the application instance","example":"kirtd-oleria","isRequired":true,"uniqueKey":"\\items.items.[INDEX].alias","typeLabel":"string"},"authenticationFunctions":{"type":"array","description":"Authentication functions associated with this account (see [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction))\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationFunctions.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationFunctions","typeLabel":"string[]"},"email":{"type":"string","description":"The primary email address of the _Account_\n","format":"email","example":"kirt@oleria.com","isRequired":true,"uniqueKey":"\\items.items.[INDEX].email","typeLabel":"string\u003cemail>"},"enabled":{"type":"boolean","description":"Is the _Account_ enabled?\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enabled","typeLabel":"boolean"},"hasAPIAccess":{"type":"boolean","description":"Is the _Account_ authorized to access the application's API endpoints?\n","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].hasAPIAccess","typeLabel":"boolean"},"id":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].id","typeLabel":"string"},"isAdmin":{"type":"boolean","description":"Is the _Account_ an administrator?\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].isAdmin","typeLabel":"boolean"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].mfaRequirements","typeLabel":"enum\u003cstring>"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata","typeLabel":"object"},"ssoRequirements":{"type":"string","description":"SSO requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Configured","NotApplicable","NotConfigured","Required","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].ssoRequirements","typeLabel":"enum\u003cstring>"},"subType":{"type":"string","description":"The following sub-types of account are supported:\n1. _Application_ is used to represent accounts used to represent an \"installed\" application or custom created service principal for application or federated use. When the sub-type is _Application_, the source application should also emit [ApprovedApplicationUsage](#/components/schemas/ApprovedApplicationUsage) for the account\n2. _AnonymousUser_ is used to represent anonymous accounts typically in the context of sharing resources\n3. _ExternalUser_ is used to represent accounts that are outside of the application-defined customer organizational unit, and is typically used in the context of sharing resources]\n4. _StandardUser_ accounts are any user accounts not classified as _AnonymousUser_ or _ExternalUser_ and is typically the majority of accounts managed by an enterprise application\n5. _System_ is used to represent system bots and pre-defined or configurable system service principals e.g. the merge queue bot in GitHub\n5. _Unavailable_ should be indicated when the sub-type of the account cannot be definitively determined as _AnonymousUser_, _ExternalUser_, _StandardUser_, _Application_, or _System_ based on the absence of endpoint functionality or lack of access\n","example":"Standard","enum":["Application","AnonymousUser","ExternalUser","StandardUser","System","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].subType","typeLabel":"enum\u003cstring>"},"type":{"type":"string","description":"1. _Machine_ accounts are used to represent system-defined accounts and service principals registered with the enterprise application that can take some sort of audited action\n2. _Token_ accounts are used to represent tokens used to impersonate accounts with some restricted scope e.g. personal access tokens\n3. _User_ accounts are used to represent human users of the application\n","example":"User","enum":["Machine","Token","User"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"globalId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalId","typeLabel":"string"},"enrichedNormalizedEmail":{"type":"string","description":"Normalized version of the email found in Account.Email","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedNormalizedEmail","typeLabel":"string"},"enrichedSharingRiskCategory":{"type":"string","description":"Categories of risk implied by sharing to an entity (account) evaluated as having the given risk category","enum":["AnonymousEndpoint","RegisteredEnterpriseEndpoint","RegisteredInternetEndpoint","TrustedApplicationEndpoint","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedSharingRiskCategory","typeLabel":"enum\u003cstring>"},"enrichedMFAStatus":{"type":"object","properties":{"adaptiveAuthenticationMethodSelectionPolicies":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.adaptiveAuthenticationMethodSelectionPolicies","typeLabel":"object[]"},"authenticationMethodSelectionPolicies":{"type":"array","items":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX].includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.authenticationMethodSelectionPolicies","typeLabel":"object[]"},"enforcementStatus":{"type":"string","description":"What level of MFA enforcement is being done on an account","enum":["AdaptiveAndEnforced","AdaptiveAndNotEnforced","Enforced","Excluded","NotApplicable","NotEnforced","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcementStatus","typeLabel":"enum\u003cstring>"},"enrolledAuthenticationMethods":{"type":"object","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enrolledAuthenticationMethods.entries.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enrolledAuthenticationMethods.entries.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enrolledAuthenticationMethods.entries.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enrolledAuthenticationMethods.entries","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enrolledAuthenticationMethods","typeLabel":"object"},"enforcedAuthenticationMethods":{"type":"object","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcedAuthenticationMethods.entries.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcedAuthenticationMethods.entries.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcedAuthenticationMethods.entries.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcedAuthenticationMethods.entries","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.enforcedAuthenticationMethods","typeLabel":"object"},"participatingEntities":{"type":"array","items":{"type":"object","properties":{"objectData":{"oneOf":[{"type":"object","description":"An Account object represents a user's account in an identity provider, enterprise application, or directory e.g. Okta, PingOne, ActiveDirectory, GitHub, Salesforce, or ServiceNow","required":["accountRole","alias","authenticationFunctions","email","enabled","hasAPIAccess","id","isAdmin","mfaRequirements","objectMetadata","ssoRequirements","subType","type"],"properties":{"accountRole":{"type":"string","description":"The source application-specific role associated with the account e.g. member, admin, etc. This preserves the underlying information used to determine __type__ and __userType__ of the account, and is referenced when doing identity provider assignment\n","example":"MEMBER","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.accountRole","typeLabel":"string"},"alias":{"minLength":1,"type":"string","description":"The username associated with the account in the application instance","example":"kirtd-oleria","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.alias","typeLabel":"string"},"authenticationFunctions":{"type":"array","description":"Authentication functions associated with this account (see [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction))\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationFunctions.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationFunctions","typeLabel":"string[]"},"email":{"type":"string","description":"The primary email address of the _Account_\n","format":"email","example":"kirt@oleria.com","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.email","typeLabel":"string\u003cemail>"},"enabled":{"type":"boolean","description":"Is the _Account_ enabled?\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.enabled","typeLabel":"boolean"},"hasAPIAccess":{"type":"boolean","description":"Is the _Account_ authorized to access the application's API endpoints?\n","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.hasAPIAccess","typeLabel":"boolean"},"id":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.id","typeLabel":"string"},"isAdmin":{"type":"boolean","description":"Is the _Account_ an administrator?\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.isAdmin","typeLabel":"boolean"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.mfaRequirements","typeLabel":"enum\u003cstring>"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectMetadata","typeLabel":"object"},"ssoRequirements":{"type":"string","description":"SSO requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Configured","NotApplicable","NotConfigured","Required","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.ssoRequirements","typeLabel":"enum\u003cstring>"},"subType":{"type":"string","description":"The following sub-types of account are supported:\n1. _Application_ is used to represent accounts used to represent an \"installed\" application or custom created service principal for application or federated use. When the sub-type is _Application_, the source application should also emit [ApprovedApplicationUsage](#/components/schemas/ApprovedApplicationUsage) for the account\n2. _AnonymousUser_ is used to represent anonymous accounts typically in the context of sharing resources\n3. _ExternalUser_ is used to represent accounts that are outside of the application-defined customer organizational unit, and is typically used in the context of sharing resources]\n4. _StandardUser_ accounts are any user accounts not classified as _AnonymousUser_ or _ExternalUser_ and is typically the majority of accounts managed by an enterprise application\n5. _System_ is used to represent system bots and pre-defined or configurable system service principals e.g. the merge queue bot in GitHub\n5. _Unavailable_ should be indicated when the sub-type of the account cannot be definitively determined as _AnonymousUser_, _ExternalUser_, _StandardUser_, _Application_, or _System_ based on the absence of endpoint functionality or lack of access\n","example":"Standard","enum":["Application","AnonymousUser","ExternalUser","StandardUser","System","Unavailable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.subType","typeLabel":"enum\u003cstring>"},"type":{"type":"string","description":"1. _Machine_ accounts are used to represent system-defined accounts and service principals registered with the enterprise application that can take some sort of audited action\n2. _Token_ accounts are used to represent tokens used to impersonate accounts with some restricted scope e.g. personal access tokens\n3. _User_ accounts are used to represent human users of the application\n","example":"User","enum":["Machine","Token","User"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.type","typeLabel":"enum\u003cstring>"},"accountRoleDisplayName":{"type":"string","example":"Org Members","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.accountRoleDisplayName","typeLabel":"string"},"alternateEmails":{"type":"array","items":{"type":"string","description":"Alternate email aliases for the account's primary email","format":"email","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.alternateEmails.items.[INDEX]","typeLabel":"string\u003cemail>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.alternateEmails","typeLabel":"string\u003cemail>[]"},"approvedApplicationPermissions":{"type":"array","items":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX].specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationPermissions","typeLabel":"object[]"},"approvedApplicationUsages":{"type":"array","description":"Approved application usages associated with this account (see [ApprovedApplicationUsage](#/components/schemas/ApprovedApplicationUsage))\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationUsages.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.approvedApplicationUsages","typeLabel":"string[]"},"assignedLocations":{"type":"array","description":"These are the locations assigned as delivery points for this _Account_. It is typically populated by identity providers in lieu of the definitive data coming from HRIS integrations\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.assignedLocations","typeLabel":"object[]"},"authenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethods","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authenticationMethodSelectionPolicy","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.authorizedLocations","typeLabel":"object"},"companyName":{"type":"string","description":"The name of the company or enterprise associated with the _Account_\n","example":"Oleria Corporation","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.companyName","typeLabel":"string"},"costCenter":{"type":"string","description":"The cost center associated with the owner of the _Account_\n","example":"232345","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.costCenter","typeLabel":"string"},"countryCode":{"type":"string","description":"ISO-3166-1 A-2 country code assigned to the account\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.countryCode","typeLabel":"string"},"createdBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.createdBy","typeLabel":"string"},"createdByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.createdByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.createdByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.createdByFederation","typeLabel":"object"},"createdDate":{"type":"string","description":"The date the _Account_ was created\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.createdDate","typeLabel":"string\u003cdate-time>"},"department":{"type":"string","description":"The name of the company or enterprise department associated with the _Account_\n","example":"Platform Engineering","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.department","typeLabel":"string"},"directoryEntryFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryEntryFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryEntryFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryEntryFederation","typeLabel":"object"},"directoryEntryId":{"type":"string","description":"The _directoryEntryId_ is emitted when this _Account_ object is synced with an _Account_ emitted by a directory. The id here should match the synced _Account.id_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryEntryId","typeLabel":"string"},"directoryProviderFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryProviderFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryProviderFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryProviderFederation","typeLabel":"object"},"directoryProviderId":{"type":"string","description":"The _directoryProviderId_ indicates the [DirectoryProvider](#/components/schemas/DirectoryProvider) defining the sync relationship for this account\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.directoryProviderId","typeLabel":"string"},"displayName":{"type":"string","description":"The user experience displayable name of the _Account_ holder e.g. a nickname. If this field is not set, then Oleria will set its value to name during processing\n","example":"Kirtliness","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.displayName","typeLabel":"string"},"employeeNumber":{"type":"string","description":"The employee number associated with the _Account_ holder\n","example":"29375","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.employeeNumber","typeLabel":"string"},"expirationDate":{"type":"string","description":"The date the _Account_ expires if applicable\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.expirationDate","typeLabel":"string\u003cdate-time>"},"federationId":{"type":"string","description":"A FederationId is an account username override used in the context of an authenticated session or in some contexts an Oleria LocallyUniqueAccountId","example":"kirt@oleria.dev","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.federationId","typeLabel":"string"},"hashIdentifiers":{"type":"array","deprecated":true,"description":"**Deprecated** — emit a [Credential](#/components/schemas/Credential) together with a [CredentialAuthenticatesEntity](#/components/schemas/CredentialAuthenticatesEntity) to the account instead. Only certificate and public-key digests may be carried over into _fingerprints_; a digest of symmetric material such as an API key or token must not be, because the digest is itself a verifier. The hash identifiers are typically emitted in connection with Machine and Token accounts to expose the fact that they can be \"unlocked\" by access to key material matching the hash. The relevant [hash algorithm prefix](#/components/schemas/HashOrFingerprintAlgorithmPrefix) plus the hash are added to the array of strings so they can be connected to owner or steward accounts by Oleria\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.hashIdentifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.hashIdentifiers","typeLabel":"string[]"},"jobCode":{"type":"string","description":"Identifier of the job or job profile of the _Account_'s owner, also known as the Job ID\n(Workday _Job Code_ — the Job Profile's reference ID; SuccessFactors _Job Classification_ code)\n","example":"343949","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.jobCode","typeLabel":"string"},"jobFamily":{"type":"string","description":"The job family of the _Account_ owner's job — a grouping of related jobs that share\ncore knowledge and background requirements (Workday and SuccessFactors _Job Family_).\nNarrower than _jobFamilyGroup_ and broader than _specialization_\n","example":"Software Engineering","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.jobFamily","typeLabel":"string"},"jobFamilyGroup":{"type":"string","description":"The broadest grouping of job families for the _Account_ owner's job\n(Workday _Job Family Group_)\n","example":"Technology","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.jobFamilyGroup","typeLabel":"string"},"jobFunction":{"type":"string","description":"The functional role or occupation of the _Account_'s owner. A role-level descriptor,\nnot a broad grouping — occupational groupings belong in _jobFamily_ / _jobFamilyGroup_\n","example":"Product Manager","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.jobFunction","typeLabel":"string"},"lastActivityDate":{"type":"string","description":"The date of the last activity performed by the _Account_\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastActivityDate","typeLabel":"string\u003cdate-time>"},"lastModifiedBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastModifiedBy","typeLabel":"string"},"lastModifiedByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastModifiedByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastModifiedByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastModifiedByFederation","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the _Account_ was last modified\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"lastPasswordChangedDate":{"type":"string","description":"The date the _Account_ password was last changed\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.lastPasswordChangedDate","typeLabel":"string\u003cdate-time>"},"licenseLevel":{"type":"string","description":"The license regime under which the account is currently active or was last activated","example":"Paid","enum":["Free","NotApplicable","Paid","Unassigned","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.licenseLevel","typeLabel":"enum\u003cstring>"},"licenseStatus":{"type":"string","description":"Is the account license active or inactive?","example":"Active","enum":["Active","Inactive","NotApplicable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.licenseStatus","typeLabel":"enum\u003cstring>"},"licenseType":{"type":"string","description":"The application-specific license type (or plan) used by the _Account_\n","example":"Enterprise Plan","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.licenseType","typeLabel":"string"},"managerEmails":{"type":"array","description":"Array of manager emails for the employee that has the _Account_\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.managerEmails.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.managerEmails","typeLabel":"string[]"},"name":{"minLength":1,"type":"string","description":"The name (ideally full name) of the _Account_ holder\n","example":"Kirt Debique","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.name","typeLabel":"string"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.objectDirectoryContainerId","typeLabel":"string"},"profileMetadata":{"type":"array","description":"An array of profile key-value pairs extending the schema of the _Account_ object\n","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.profileMetadata","typeLabel":"object[]"},"provisioning":{"type":"array","items":{"type":"object","properties":{"authenticationKey":{"type":"string","description":"Authentication key used to match the other side of the sync relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].authenticationKey","typeLabel":"string"},"entitySync":{"type":"object","properties":{"attributeControls":{"type":"array","items":{"type":"object","properties":{"attributeSync":{"type":"array","items":{"type":"string","enum":["OnCreate","OnUpdate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync","typeLabel":"enum\u003cstring>[]"},"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].id","typeLabel":"string"},"sourceAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceAttributeName","typeLabel":"string"},"sourceEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceEntityType","typeLabel":"enum\u003cstring>"},"targetAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetAttributeName","typeLabel":"string"},"targetEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetEntityType","typeLabel":"enum\u003cstring>"}},"description":"An EntitySyncAttributeMapping expresses how specific account or group fields are mapped during sync of objects among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.attributeControls","typeLabel":"object[]"},"protocol":{"type":"string","description":"These specifiers are used to identify different protocols for syncing account and group information among IDPs, directories, and enterprise applications","enum":["AD","LDAP","SAML","SCIM"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.protocol","typeLabel":"enum\u003cstring>"},"protocolControls":{"type":"array","items":{"type":"string","description":"These specifiers are used to express the protocol actions used to sync accounts among IDPs, directories, and enterprise applications","enum":["Create","Deactivate","Delete","SyncPassword","Update"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.protocolControls.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync.protocolControls","typeLabel":"enum\u003cstring>[]"}},"description":"An EntitySyncSpecification expresses how accounts are synced among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].entitySync","typeLabel":"object"},"syncKey":{"type":"string","description":"The syncKey identifies the matching entity used for the sync relationship and the syncMethod indicates how the sync is accomplished","example":"Oleria Repository Writers","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].syncKey","typeLabel":"string"},"syncMethod":{"type":"string","description":"Sync methods for user groups between IDPs and enterprise applications where the UserGroup.syncKey identifies the matching group name used for the sync relationship and the UserGroup.syncMethod is a SyncMethodType indicating how the sync is accomplished","enum":["ApplicationSpecific","Bidirectional","None","Pull","Push","Receive"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX].syncMethod","typeLabel":"enum\u003cstring>"}},"description":"For IDP to application provisioning sync (as distinct from directory provider sync), the _ProvisioningParticipant_ structure provides information about a specific IDP to application connection for an entity (account, group, role, etc.)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.provisioning","typeLabel":"object[]"},"secondaryAccountRoles":{"type":"array","description":"Additional underlying account roles associated with the _Account_ object\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.secondaryAccountRoles.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.secondaryAccountRoles","typeLabel":"string[]"},"sourceTag":{"type":"string","description":"An application-specific tag representing the _Account_ information data source\n","example":"OrgOwners","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.sourceTag","typeLabel":"string"},"specialization":{"type":"string","description":"A finer sub-discipline within the _Account_ owner's _jobFamily_. There is no standard\nWorkday or SuccessFactors foundation field for this — it is sourced from an org-defined\nspecialty or sub-classification. Not the Workday _Job Category_ field, which is a\nregulatory/EEO classification. Distinct from the business _title_\n","example":"Site Reliability","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.specialization","typeLabel":"string"},"title":{"type":"string","description":"The job title of the _Account_ holder\n","example":"Chief Architect","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0.title","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.0","typeLabel":"object"},{"type":"object","description":"An AccountRole object represents a native or modeled underlying role for an identity provider or application that ultimately implies a set of entitlements\n","required":["id","name","objectMetadata"],"properties":{"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.id","typeLabel":"string"},"name":{"type":"string","description":"The unique name of the native or modeled underlying role that is referenced by [Account](#/components/schemas/Account) objects via _accountRole_, [SSOAccountAssignmentSpecification](#/components/schemas/SSOAccountAssignmentSpecification) via _accountRoles_, and [SSOUserGroupAssignmentSpecification](#/components/schemas/SSOUserGroupAssignmentSpecification) via _accountRolesForGroup_\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectMetadata","typeLabel":"object"},"displayName":{"type":"string","description":"Display name for the account role\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.displayName","typeLabel":"string"},"impliedEntitlements":{"type":"array","description":"This describes the entitlements that are given to an [Account](#/components/schemas/Account) when it is assigned that role\n","items":{"type":"object","properties":{"inferenceConfidence":{"type":"number","description":"If the entitlement is inferred, then this gives a confidence score between 0 and 1\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].inferenceConfidence","typeLabel":"number"},"isInferred":{"type":"boolean","description":"If false, then the specified entitlement is considered \"actual\" i.e. known with 100% confidence, if true, then the entitlement is inferred from some set of properties and the _inferenceConfidence_ indicates confidence in the \"reality\" of the entitlement given relevant data sources. Note: even if an entitlement has 100% confidence, authorized access via the entitlement always needs to be evaluated and tested in real-time\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].isInferred","typeLabel":"boolean"},"reason":{"type":"string","description":"EntitlementReason indicates why a particular entitlement has been assigned in the context of an EntitlementSpecification for an AssignedAccessTo relationship","enum":["AccessControl","MFA","SSO"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reason","typeLabel":"enum\u003cstring>"},"reasonSpecificData":{"oneOf":[{"type":"object","description":"Reason specific data associated with entitlement AssignedAccessTo relationship","required":["enabled"],"properties":{"enabled":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.enabled","typeLabel":"boolean"},"accessControlMetadata":{"type":"array","description":"An array of high level metadata values associated with the access control (separate from the metadata specifically associated with the underlying conditions or permissions). This would typically be application-specific encoding metadata associated with the entitlement that is not already schematized internally","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.accessControlMetadata","typeLabel":"object[]"},"conditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"any"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"any"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"any"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.conditions","typeLabel":"object"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.description","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.name","typeLabel":"string"},"permissions":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions.specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.permissions","typeLabel":"object"},"shareableUri":{"type":"string","description":"A optional shareable URI that resolves to the access control target via the described entitlement and subject to the permissions described therein\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.shareableUri","typeLabel":"string"},"shareableUriLabel":{"type":"string","description":"An optional label that can be used when displaying the _shareableUri_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.shareableUriLabel","typeLabel":"string"},"sourceTag":{"type":"string","description":"An application-specific reason for the entitlement","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.sourceTag","typeLabel":"string"},"type":{"type":"string","description":"As part of [AccessControlEntitlementInformation](#/components/schemas/AccessControlEntitlementInformation), the type enumeration indicates if the permissions in the entitlement are granted or denied when the entitlement is evaluated by an authorization function","enum":["Denial","Grant"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"Reason specific data associated with entitlement AssignedAccessTo relationship","properties":{"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.authorizedLocations","typeLabel":"object"},"conditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"any"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"any"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"any"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.conditions","typeLabel":"object"},"mfaMetadata":{"type":"array","description":"A array of additional metadata values associated with the MFA","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1.mfaMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.1","typeLabel":"object"},{"type":"object","description":"Reason specific data associated with entitlement AssignedAccessTo relationship","properties":{"assignment":{"type":"object","properties":{"assignedApplicationTrust":{"type":"string","description":"The level of trust an identity provider indicates for the assignment of an application to an [Account](#/components/schemas/Account) or [UserGroup](#/components/schemas/UserGroup)\n","enum":["Blocked","NotApplicable","Trusted","Unavailable","Untrusted"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.assignedApplicationTrust","typeLabel":"enum\u003cstring>"},"assignedApplicationScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.assignedApplicationScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.assignedApplicationScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.assignedApplicationScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.assignedApplicationScopes","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the _Account_ was last modified\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"type":{"type":"string","description":"Types of SSO assigment associated with an entitlement","enum":["Account","Group"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.type","typeLabel":"enum\u003cstring>"},"typeSpecificAssignment":{"oneOf":[{"type":"object","properties":{"accountOverride":{"type":"object","properties":{"alias":{"minLength":1,"type":"string","description":"The username associated with the account in the application instance","example":"kirtd-oleria","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.alias","typeLabel":"string"},"companyName":{"type":"string","description":"The name of the company or enterprise associated with the account","example":"Oleria Corporation","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.companyName","typeLabel":"string"},"department":{"type":"string","description":"The name of the company or enterprise department associated with the account","example":"Engineering","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.department","typeLabel":"string"},"displayName":{"type":"string","description":"The user experience displayable name of the account holder e.g. a nickname. If this field is not set, then Oleria will set its value to name during processing","example":"Kirtliness","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.displayName","typeLabel":"string"},"email":{"type":"string","description":"The primary email address of the account","format":"email","example":"kirt@oleria.com","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.email","typeLabel":"string\u003cemail>"},"employeeNumber":{"type":"string","description":"The employee number associated with the account holder","example":"29375","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.employeeNumber","typeLabel":"string"},"jobFunction":{"type":"string","description":"The job function associated with the owner of the account","example":"Engineering","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.jobFunction","typeLabel":"string"},"name":{"minLength":1,"type":"string","description":"The name (ideally full name) of the account holder","example":"Kirt Debique","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.name","typeLabel":"string"},"title":{"type":"string","description":"The job title of the account holder","example":"Chief Architect","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride.title","typeLabel":"string"}},"description":"When an SSO entitlement federation protocol allows override of account information, the overrides are specified via the AccountOverrideInformation","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountOverride","typeLabel":"object"},"accountRoles":{"type":"array","description":"The application-specific roles to be associated with accounts in the group e.g. member, admin, etc.","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountRoles.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.accountRoles","typeLabel":"string[]"},"externalAccountId":{"type":"string","description":"Account identifier in the external system being federated","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.externalAccountId","typeLabel":"string"},"federationId":{"type":"string","description":"Identifier used to match accounts across the federation relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.federationId","typeLabel":"string"},"type":{"type":"string","description":"Types of account assignment","enum":["Direct","ViaGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.0","typeLabel":"object"},{"type":"object","properties":{"accountRolesForGroup":{"type":"array","description":"The application-specific roles to be associated with accounts in the group e.g. member, admin, etc.","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.accountRolesForGroup.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.accountRolesForGroup","typeLabel":"string[]"},"memberOverride":{"type":"object","required":["overridePriority"],"properties":{"overridePriority":{"type":"number","description":"The priority used to resolve conflicts in assignment across multiple groups","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overridePriority","typeLabel":"number"},"overrideMetadata":{"type":"array","description":"An array of metadata items containing the override attribute name, type, and value","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride.overrideMetadata","typeLabel":"object[]"}},"description":"For SSO entitlement when accounts are assigned access via groups, this information is used to override certain attributes on the accounts","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1.memberOverride","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment.typeSpecificAssignment","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.assignment","typeLabel":"object"},"protocol":{"type":"string","description":"Federation protocols that can be used for entitlements","enum":["FirstParty","OAuth","OIDC","RADIUS","SAML","Trustfusion"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocol","typeLabel":"enum\u003cstring>"},"protocolMetadata":{"type":"array","description":"A array of additional metadata values associated with the entitlement assignment protocol","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2.protocolMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData.oneOf.2","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX].reasonSpecificData","typeLabel":"object"}},"description":"The EntitlementSpecification describes the entitlements associated with an AssignedAccessTo relationship used for access control entitlement or SSO entitlement purposes","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.impliedEntitlements","typeLabel":"object[]"},"membership":{"type":"array","description":"If an _AccountRole_ is a member of other _AccountRoles_ then the membership is listed via AccountRole.id values\n","items":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.membership.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.membership","typeLabel":"string[]"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1.objectDirectoryContainerId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.1","typeLabel":"object"},{"type":"object","description":"An Activity object represents an entry in an identity provider or application audit log. Activities are used by Oleria to deliver account analytics, group analytics, role mining, graph activity overlay, and many other features. A key part of interpreting an activity is through the lens of the activity type (especially Oleria schematized activity types). The [ActivityType](#/components/schemas/ActivityType) gives a description on how to interpret type specific data and what to expect for the activity's affected object\n","required":["activatedPermissionsAvailable","activityType","actorAccountId","affectedObjectId","affectedObjectType","applicationActivityType","errorCode","id","objectMetadata","timestamp"],"properties":{"activatedPermissionsAvailable":{"type":"boolean","description":"If this is true, then the activatedPermissionSets are correct even if len(activatedPermissionSets) is zero. Otherwise, the activated permissions should be treated as unknown\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionsAvailable","typeLabel":"boolean"},"activityType":{"type":"string","description":"An Oleria schematization of activity types to enable type specific system processing. The following table details the type-specific data associated with these schematized activities as well as the affected object. Note: for enterprise applications and directories, xxxApplication == IntegratedApplication; for identity providers a) xxxApplication == AssignedApplication for SSO login activity, b) xxxApplication == IntegratedApplication for any other activities including local login and logout\n\n| Activity Type | Data | Affected Object |\n|-------------------------------------------|---------------------------------------------------------------------|-----------------------------|\n| AccessTo.Deleted | [Link](#/components/schemas/AccessToDeletedActivityData) | ResourceInstance |\n| Account.AccountRoleChanged | N/A | Account |\n| Account.Disabled | N/A | Account |\n| Account.Enabled | N/A | Account |\n| Account.Impersonated | N/A | Account |\n| Agent.Invoked | N/A | Agent (the invoked agent; its version, where known, in secondaryAffectedObjects) |\n| Authentication.Methods.Added | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Authorized | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Removed | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.ResetAllowed | N/A | Integrated Application |\n| Authentication.Methods.ResetDisallowed | N/A | Integrated Application |\n| Authentication.Methods.Revoked | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Updated | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.General.Added | N/A | Integrated Application |\n| Authentication.Policy.General.Removed | N/A | Integrated Application |\n| Authentication.Policy.General.Updated | N/A | Integrated Application |\n| Authentication.Policy.Method.NotRequired | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.Method.Required | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.MFA.Adaptive | N/A | Integrated Application |\n| Authentication.Policy.MFA.NotRequired | N/A | Integrated Application |\n| Authentication.Policy.MFA.Required | N/A | Integrated Application |\n| Authentication.Policy.Password.Added | N/A | Integrated Application |\n| Authentication.Policy.Password.Removed | N/A | Integrated Application |\n| Authentication.Policy.Password.Updated | N/A | Integrated Application |\n| Authentication.Policy.SSO.NotRequired | N/A | Integrated Application |\n| Authentication.Policy.SSO.Required | N/A | Integrated Application |\n| Authentication.Policy.SSO.Updated | N/A | Integrated Application |\n| Authentication.Secret.Added | N/A | Secret dependent |\n| Authentication.Secret.Removed | N/A | Secret dependent |\n| Authentication.Secret.Rotated | N/A | Secret dependent |\n| Authentication.Secret.Updated | N/A | Secret dependent |\n| Authorization.Access.Authorized | N/A | Resource Instance |\n| Authorization.Access.Denied | N/A | Resource Instance |\n| Authorization.Access.Granted | N/A | Resource Instance |\n| Authorization.Access.Requested | N/A | Resource Instance |\n| Authorization.Access.Revoked | N/A | Resource Instance |\n| Authorization.Access.Updated | N/A | Resource Instance |\n| Authorization.Requirements.Created | N/A | Resource Instance |\n| Authorization.Requirements.Deleted | N/A | Resource Instance |\n| Authorization.Requirements.Updated | N/A | Resource Instance |\n| Authorization.UnmanagedApplication.Granted | [Link](#/components/schemas/UnmanagedApplicationEntitlementInfo) | Account |\n| Authorization.UnmanagedApplication.Revoked | [Link](#/components/schemas/UnmanagedApplicationEntitlementInfo) | Account |\n| Container.Content.Activity |[Link](#/components/schemas/ContainerContentActivityInformation) | Resource Instance |\n| Content.Download.Failed | N/A | Resource Instance |\n| Content.Download.Success | N/A | Resource Instance |\n| Content.Upload.Failed | N/A | Resource Instance |\n| Content.Upload.Success | N/A | Resource Instance |\n| Credential.Retrieved | N/A | Credential |\n| Endpoint.Access.AccountToService.Failed | N/A | Integrated Application |\n| Endpoint.Access.AccountToService.Success | N/A | Integrated Application |\n| Endpoint.Access.AccountToUnmanagedApplication.Failed | N/A | Account |\n| Endpoint.Access.AccountToUnmanagedApplication.Success | N/A | Account |\n| Endpoint.Access.ServiceToService.Failed | N/A | Integrated Application |\n| Endpoint.Access.ServiceToService.Success | N/A | Integrated Application |\n| Label.Added | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Created | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Destroyed | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Updated | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Removed | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| License.Added | N/A | License dependent |\n| License.Assigned | N/A | License dependent |\n| License.Removed | N/A | License dependent |\n| License.Unassigned | N/A | License dependent | \n| License.Updated | N/A | License dependent |\n| Login.Failed | N/A | xxxApplication |\n| Login.Remote.Failed | N/A | Resource Instance |\n| Login.Remote.Success | N/A | Resource Instance |\n| Login.Success | N/A | xxxApplication |\n| Logout | N/A | xxxApplication |\n| Logout.Remote | N/A | Resource Instance |\n| Object.Created | N/A | Object dependent |\n| Object.Deleted | N/A | Object dependent |\n| Object.Updated | N/A | Object dependent |\n| Ownership.Added | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Ownership.Removed | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Ownership.Transferred | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Password.ChangedByUser | N/A | User Account |\n| Password.ChangedForUser | N/A | User Account |\n| Password.ResetByUser | N/A | User Account |\n| Password.ResetForUser | N/A | User Account |\n| Relationship.Created | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Relationship.Deleted | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Relationship.Updated | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Security.Notification | N/A | Setting dependent |\n| Settings.Updated | N/A | Setting dependent |\n| Suspicious.Login.Failed | N/A | xxxApplication |\n| Suspicious.Login.Success | N/A | xxxApplication |\n| App.Custom | N/A | App dependent |\n","example":"Login.Success","enum":["AccessTo.Deleted","Account.AccountRoleChanged","Account.Disabled","Account.Enabled","Account.Impersonated","Agent.Invoked","Authentication.Methods.Added","Authentication.Methods.Authorized","Authentication.Methods.Removed","Authentication.Methods.ResetAllowed","Authentication.Methods.ResetDisallowed","Authentication.Methods.Revoked","Authentication.Methods.Updated","Authentication.Policy.General.Added","Authentication.Policy.General.Removed","Authentication.Policy.General.Updated","Authentication.Policy.Method.NotRequired","Authentication.Policy.Method.Required","Authentication.Policy.MFA.Adaptive","Authentication.Policy.MFA.NotRequired","Authentication.Policy.MFA.Required","Authentication.Policy.Password.Added","Authentication.Policy.Password.Removed","Authentication.Policy.Password.Updated","Authentication.Policy.SSO.NotRequired","Authentication.Policy.SSO.Required","Authentication.Policy.SSO.Updated","Authentication.Secret.Added","Authentication.Secret.Removed","Authentication.Secret.Rotated","Authentication.Secret.Updated","Authorization.Access.Authorized","Authorization.Access.Denied","Authorization.Access.Granted","Authorization.Access.Requested","Authorization.Access.Revoked","Authorization.Access.Updated","Authorization.Requirements.Created","Authorization.Requirements.Deleted","Authorization.Requirements.Updated","Authorization.UnmanagedApplication.Granted","Authorization.UnmanagedApplication.Revoked","Container.Content.Activity","Content.Download.Failed","Content.Download.Success","Content.Upload.Failed","Content.Upload.Success","Credential.Retrieved","Endpoint.Access.AccountToService.Failed","Endpoint.Access.AccountToService.Success","Endpoint.Access.AccountToUnmanagedApplication.Failed","Endpoint.Access.AccountToUnmanagedApplication.Success","Endpoint.Access.ServiceToService.Failed","Endpoint.Access.ServiceToService.Success","Label.Added","Label.Created","Label.Destroyed","Label.Updated","Label.Removed","License.Added","License.Assigned","License.Removed","License.Unassigned","License.Updated","Login.Failed","Login.Remote.Failed","Login.Remote.Success","Login.Success","Logout","Logout.Remote","Object.Created","Object.Deleted","Object.Updated","Ownership.Added","Ownership.Removed","Ownership.Transferred","Password.ChangedByUser","Password.ChangedForUser","Password.ResetByUser","Password.ResetForUser","Relationship.Created","Relationship.Deleted","Relationship.Updated","Secret.Added","Secret.Deleted","Secret.Revocation.Failed","Secret.Revocation.Success","Secret.Updated","Secret.Verification.Failed","Secret.Verification.Success","Security.Notification","Settings.Updated","Suspicious.Login.Failed","Suspicious.Login.Success","Token.Revocation.Failed","Token.Revocation.Requested","Token.Revocation.Success","App.Custom"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityType","typeLabel":"enum\u003cstring>"},"actorAccountId":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAccountId","typeLabel":"string"},"affectedObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.affectedObjectId","typeLabel":"string"},"affectedObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.affectedObjectType","typeLabel":"enum\u003cstring>"},"applicationActivityType":{"type":"string","description":"The application-specific activity type that is sometimes schematized to an Oleria activity type as defined by ActivityType. If there is a schematized corresponding activity type, then applicationActivityType gives additional application-specific information about the activity e.g. Login.Success == org.sso_response for GitHub in the SSO login scenario. If there is not a relevant schematized type then activityType is ApplicationSpecific and the applicationActivityType is used to communicate the full information about the type of activity e.g. workflows.completed_workflow_run (GitHub), drive.access (Google Workspace)","example":"org.sso_response (GitHub), workflows.completed_workflow_run (GitHub), drive.access (Google Workspace)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.applicationActivityType","typeLabel":"string"},"errorCode":{"type":"integer","description":"For any activity type indicating failure e.g. login.failed, a reason code can be emitted with the activity","example":404,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.errorCode","typeLabel":"integer"},"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.id","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectMetadata","typeLabel":"object"},"timestamp":{"type":"string","description":"The timestamp of the activity","format":"date-time","example":"2024-05-02T03:17:34.948Z","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.timestamp","typeLabel":"string\u003cdate-time>"},"activatedPermissionSets":{"type":"array","description":"An array of permission specifications (one per resource class) associated with this activity\n","items":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX].specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activatedPermissionSets","typeLabel":"object[]"},"activity":{"type":"string","description":"The description of the activity that was logged","example":"CI","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activity","typeLabel":"string"},"activityMetadata":{"type":"array","description":"An array of additional metadata values associated with the activity including cached activity data about the affected object using a namespace string equal to the affectedObjectType","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.activityMetadata","typeLabel":"object[]"},"actorAccountFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAccountFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAccountFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAccountFederation","typeLabel":"object"},"actorAgentReference":{"type":"object","required":["agentId"],"properties":{"agentId":{"type":"string","minLength":1,"description":"The agent the source's own record names as being behind the actor. Populated only where the record carries the agent directly, or where the source application can resolve it deterministically inside its own source — a workload identity the platform creates per agent, or the runtime and endpoint an invocation was addressed to. Never derived from a principal that several agents share; for those records it is absent. Expected to be consistent with the [EntityHasAccount](#/components/schemas/EntityHasAccount) for the same actorAccountId\n","example":"harness_order-triage-harness","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference.agentId","typeLabel":"string"},"agentVersionId":{"type":"string","minLength":1,"description":"The version the record names, or the version the endpoint an invocation was addressed to resolved to. It identifies the configuration the run started from, not what executed: a run may override parts of the stored configuration at invocation time, so a certification claim cannot rest on this field alone\n","example":"harness_order-triage-harness:2","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference.agentVersionId","typeLabel":"string"},"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference.federationInformation","typeLabel":"object"}},"description":"Names the [Agent](#/components/schemas/Agent), and where known the [AgentVersion](#/components/schemas/AgentVersion), behind the actor of an [Activity](#/components/schemas/Activity). It is an attribution of the actor rather than a second actor: the acting principal remains actorAccountId, and this structure says which agent the source attributes that principal's action to\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAgentReference","typeLabel":"object"},"actorAuthenticationContext":{"type":"string","description":"An authentication method specific context that may be used by the platform to connect authentication activity and sessions across ApplicationInstances. For example, an enterprise application that has SSO to an identity provider could emit an event with an authentication method of SSO and an authentication context with the base64 encoded SHA256 hash of the authentication token. The corresponding IDP would emit an authentication activity with a method of Passkey and the same authentication token. This enables enrichment of application activities with the SSO authentication method. When the authentication context is empty (because the application could not provide the hash of the token), the Oleria platform will use other heuristics to try to connect the application activity with IDP authentication\n","example":"fBDpDdUUN1z0jMIUg1saZQmaA9Dx3B+0IPdcHG0fN4c=","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationContext","typeLabel":"string"},"actorAuthenticationCredentialId":{"type":"string","description":"The credential presented to authenticate the actor, where the source's audit record names one — a sign-in's federated credential or key identifier, or the credential provider an agent drew a third-party token from. A credential is narrower than the account it authenticates, so it cannot be derived from actorAccountId, and it is what makes everything done with one compromised secret answerable as a query\n","example":"aa11bb22-cc33-dd44-ee55-ff6677889900 (Microsoft Entra passwordCredential keyId), AKIAIOSFODNN7EXAMPLE (AWS access key id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationCredentialId","typeLabel":"string"},"actorAuthenticationMethods":{"type":"array","description":"Authentication methods associated with this activity and actor","example":["BiometricAuthenticator","Passkey"],"items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationMethods","typeLabel":"object[]"},"actorAuthenticationScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorAuthenticationScopes","typeLabel":"object"},"actorImpersonatorReference":{"type":"object","properties":{"accountReference":{"oneOf":[{"type":"object","description":"Reference to the impersonating account which is interpreted based on the impersonationType","properties":{"authenticationKey":{"type":"string","description":"If present, the authentication key can be used to find a specific federation target application instance. It is required for some federation protocols e.g. Trustfusion where the federationId is a locally unique account id\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.0.authenticationKey","typeLabel":"string"},"federationId":{"type":"string","description":"A FederationId is an account username override used in the context of an authenticated session or in some contexts an Oleria LocallyUniqueAccountId","example":"kirt@oleria.dev","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.0.federationId","typeLabel":"string"},"federationProtocol":{"type":"string","description":"Federation protocols that can be used for entitlements","enum":["FirstParty","OAuth","OIDC","RADIUS","SAML","Trustfusion"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.0.federationProtocol","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.0","typeLabel":"object"},{"type":"object","description":"Reference to the impersonating account which is interpreted based on the impersonationType","properties":{"accountId":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.1.accountId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.1","typeLabel":"object"},{"type":"object","description":"Reference to the impersonating account which is interpreted based on the impersonationType","properties":{"tokenData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.2.tokenData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference.oneOf.2","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.accountReference","typeLabel":"object"},"type":{"type":"string","enum":["Federated","Local","PrivateToken"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference.type","typeLabel":"enum\u003cstring>"}},"description":"The ImpersonatorReferenceInformation describes the impersonating account for an activity that is based on the impersonation auth method","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorImpersonatorReference","typeLabel":"object"},"actorLocation":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation.typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.actorLocation","typeLabel":"object"},"affectedObjectFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.affectedObjectFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.affectedObjectFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.affectedObjectFederation","typeLabel":"object"},"authenticationContextHistory":{"type":"array","description":"Historical _actorAuthenticationContext_ entries that can be associated with this _Activity_\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.authenticationContextHistory.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.authenticationContextHistory","typeLabel":"string[]"},"browserName":{"type":"string","description":"The name of the browser used for a web-based activity if applicable and available","example":"Chrome","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.browserName","typeLabel":"string"},"browserVersion":{"type":"string","description":"The version of the browser used for a web-based activity if applicable and available","example":"126","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.browserVersion","typeLabel":"string"},"errorCodeType":{"type":"string","enum":["HTTP","IntegratedApplication"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.errorCodeType","typeLabel":"enum\u003cstring>"},"errorDescription":{"type":"string","description":"Error description string","example":"The requested resource was not found","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.errorDescription","typeLabel":"string"},"ipAddress":{"type":"string","format":"ip","example":"192.39.212.89","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.ipAddress","typeLabel":"string\u003cip>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.objectDirectoryContainerId","typeLabel":"string"},"oleriaActivityTypeSpecificData":{"oneOf":[{"type":"object","description":"Activity specific data for [AccessTo.Deleted](#/components/schemas/ActivityType)","properties":{"fromId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0.fromId","typeLabel":"string"},"toId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0.toId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"Activity type specific data when activity type is an OleriaActivityType","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1.entries.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1.entries.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1.entries.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1.entries","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1","typeLabel":"object"},{"type":"object","description":"This data structure is used to convey information regarding a content notification coming out of a container\n","properties":{"activityType":{"type":"string","description":"An Oleria schematization of activity types to enable type specific system processing. The following table details the type-specific data associated with these schematized activities as well as the affected object. Note: for enterprise applications and directories, xxxApplication == IntegratedApplication; for identity providers a) xxxApplication == AssignedApplication for SSO login activity, b) xxxApplication == IntegratedApplication for any other activities including local login and logout\n\n| Activity Type | Data | Affected Object |\n|-------------------------------------------|---------------------------------------------------------------------|-----------------------------|\n| AccessTo.Deleted | [Link](#/components/schemas/AccessToDeletedActivityData) | ResourceInstance |\n| Account.AccountRoleChanged | N/A | Account |\n| Account.Disabled | N/A | Account |\n| Account.Enabled | N/A | Account |\n| Account.Impersonated | N/A | Account |\n| Agent.Invoked | N/A | Agent (the invoked agent; its version, where known, in secondaryAffectedObjects) |\n| Authentication.Methods.Added | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Authorized | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Removed | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.ResetAllowed | N/A | Integrated Application |\n| Authentication.Methods.ResetDisallowed | N/A | Integrated Application |\n| Authentication.Methods.Revoked | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Methods.Updated | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.General.Added | N/A | Integrated Application |\n| Authentication.Policy.General.Removed | N/A | Integrated Application |\n| Authentication.Policy.General.Updated | N/A | Integrated Application |\n| Authentication.Policy.Method.NotRequired | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.Method.Required | [Link](#/components/schemas/AuthenticationMethods) | Integrated Application |\n| Authentication.Policy.MFA.Adaptive | N/A | Integrated Application |\n| Authentication.Policy.MFA.NotRequired | N/A | Integrated Application |\n| Authentication.Policy.MFA.Required | N/A | Integrated Application |\n| Authentication.Policy.Password.Added | N/A | Integrated Application |\n| Authentication.Policy.Password.Removed | N/A | Integrated Application |\n| Authentication.Policy.Password.Updated | N/A | Integrated Application |\n| Authentication.Policy.SSO.NotRequired | N/A | Integrated Application |\n| Authentication.Policy.SSO.Required | N/A | Integrated Application |\n| Authentication.Policy.SSO.Updated | N/A | Integrated Application |\n| Authentication.Secret.Added | N/A | Secret dependent |\n| Authentication.Secret.Removed | N/A | Secret dependent |\n| Authentication.Secret.Rotated | N/A | Secret dependent |\n| Authentication.Secret.Updated | N/A | Secret dependent |\n| Authorization.Access.Authorized | N/A | Resource Instance |\n| Authorization.Access.Denied | N/A | Resource Instance |\n| Authorization.Access.Granted | N/A | Resource Instance |\n| Authorization.Access.Requested | N/A | Resource Instance |\n| Authorization.Access.Revoked | N/A | Resource Instance |\n| Authorization.Access.Updated | N/A | Resource Instance |\n| Authorization.Requirements.Created | N/A | Resource Instance |\n| Authorization.Requirements.Deleted | N/A | Resource Instance |\n| Authorization.Requirements.Updated | N/A | Resource Instance |\n| Authorization.UnmanagedApplication.Granted | [Link](#/components/schemas/UnmanagedApplicationEntitlementInfo) | Account |\n| Authorization.UnmanagedApplication.Revoked | [Link](#/components/schemas/UnmanagedApplicationEntitlementInfo) | Account |\n| Container.Content.Activity |[Link](#/components/schemas/ContainerContentActivityInformation) | Resource Instance |\n| Content.Download.Failed | N/A | Resource Instance |\n| Content.Download.Success | N/A | Resource Instance |\n| Content.Upload.Failed | N/A | Resource Instance |\n| Content.Upload.Success | N/A | Resource Instance |\n| Credential.Retrieved | N/A | Credential |\n| Endpoint.Access.AccountToService.Failed | N/A | Integrated Application |\n| Endpoint.Access.AccountToService.Success | N/A | Integrated Application |\n| Endpoint.Access.AccountToUnmanagedApplication.Failed | N/A | Account |\n| Endpoint.Access.AccountToUnmanagedApplication.Success | N/A | Account |\n| Endpoint.Access.ServiceToService.Failed | N/A | Integrated Application |\n| Endpoint.Access.ServiceToService.Success | N/A | Integrated Application |\n| Label.Added | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Created | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Destroyed | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Updated | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| Label.Removed | [Link](#/components/schemas/LabelInformation) | Label target dependent |\n| License.Added | N/A | License dependent |\n| License.Assigned | N/A | License dependent |\n| License.Removed | N/A | License dependent |\n| License.Unassigned | N/A | License dependent | \n| License.Updated | N/A | License dependent |\n| Login.Failed | N/A | xxxApplication |\n| Login.Remote.Failed | N/A | Resource Instance |\n| Login.Remote.Success | N/A | Resource Instance |\n| Login.Success | N/A | xxxApplication |\n| Logout | N/A | xxxApplication |\n| Logout.Remote | N/A | Resource Instance |\n| Object.Created | N/A | Object dependent |\n| Object.Deleted | N/A | Object dependent |\n| Object.Updated | N/A | Object dependent |\n| Ownership.Added | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Ownership.Removed | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Ownership.Transferred | [Link](#/components/schemas/OwnershipChangeActivityData) | Resource whose ownership changed |\n| Password.ChangedByUser | N/A | User Account |\n| Password.ChangedForUser | N/A | User Account |\n| Password.ResetByUser | N/A | User Account |\n| Password.ResetForUser | N/A | User Account |\n| Relationship.Created | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Relationship.Deleted | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Relationship.Updated | [Link](#/components/schemas/RelationshipActivityData) | None |\n| Security.Notification | N/A | Setting dependent |\n| Settings.Updated | N/A | Setting dependent |\n| Suspicious.Login.Failed | N/A | xxxApplication |\n| Suspicious.Login.Success | N/A | xxxApplication |\n| App.Custom | N/A | App dependent |\n","example":"Login.Success","enum":["AccessTo.Deleted","Account.AccountRoleChanged","Account.Disabled","Account.Enabled","Account.Impersonated","Agent.Invoked","Authentication.Methods.Added","Authentication.Methods.Authorized","Authentication.Methods.Removed","Authentication.Methods.ResetAllowed","Authentication.Methods.ResetDisallowed","Authentication.Methods.Revoked","Authentication.Methods.Updated","Authentication.Policy.General.Added","Authentication.Policy.General.Removed","Authentication.Policy.General.Updated","Authentication.Policy.Method.NotRequired","Authentication.Policy.Method.Required","Authentication.Policy.MFA.Adaptive","Authentication.Policy.MFA.NotRequired","Authentication.Policy.MFA.Required","Authentication.Policy.Password.Added","Authentication.Policy.Password.Removed","Authentication.Policy.Password.Updated","Authentication.Policy.SSO.NotRequired","Authentication.Policy.SSO.Required","Authentication.Policy.SSO.Updated","Authentication.Secret.Added","Authentication.Secret.Removed","Authentication.Secret.Rotated","Authentication.Secret.Updated","Authorization.Access.Authorized","Authorization.Access.Denied","Authorization.Access.Granted","Authorization.Access.Requested","Authorization.Access.Revoked","Authorization.Access.Updated","Authorization.Requirements.Created","Authorization.Requirements.Deleted","Authorization.Requirements.Updated","Authorization.UnmanagedApplication.Granted","Authorization.UnmanagedApplication.Revoked","Container.Content.Activity","Content.Download.Failed","Content.Download.Success","Content.Upload.Failed","Content.Upload.Success","Credential.Retrieved","Endpoint.Access.AccountToService.Failed","Endpoint.Access.AccountToService.Success","Endpoint.Access.AccountToUnmanagedApplication.Failed","Endpoint.Access.AccountToUnmanagedApplication.Success","Endpoint.Access.ServiceToService.Failed","Endpoint.Access.ServiceToService.Success","Label.Added","Label.Created","Label.Destroyed","Label.Updated","Label.Removed","License.Added","License.Assigned","License.Removed","License.Unassigned","License.Updated","Login.Failed","Login.Remote.Failed","Login.Remote.Success","Login.Success","Logout","Logout.Remote","Object.Created","Object.Deleted","Object.Updated","Ownership.Added","Ownership.Removed","Ownership.Transferred","Password.ChangedByUser","Password.ChangedForUser","Password.ResetByUser","Password.ResetForUser","Relationship.Created","Relationship.Deleted","Relationship.Updated","Secret.Added","Secret.Deleted","Secret.Revocation.Failed","Secret.Revocation.Success","Secret.Updated","Secret.Verification.Failed","Secret.Verification.Success","Security.Notification","Settings.Updated","Suspicious.Login.Failed","Suspicious.Login.Success","Token.Revocation.Failed","Token.Revocation.Requested","Token.Revocation.Success","App.Custom"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.activityType","typeLabel":"enum\u003cstring>"},"applicationActivityType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.applicationActivityType","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.description","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.name","typeLabel":"string"},"oleriaActivityTypeSpecificData":{"oneOf":[{"type":"object","description":"Activity specific data for [AccessTo.Deleted](#/components/schemas/ActivityType)","properties":{"fromId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0.fromId","typeLabel":"string"},"toId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0.toId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"Activity type specific data when activity type is an Oleria ActivityType","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.1","typeLabel":"object"},{"type":"object","description":"Details the information about a relationship (edge) associated with a Relationship.XXX activity","properties":{"federationSpecification":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.federationSpecification.isFederated","typeLabel":"boolean"},"connectionType":{"type":"string","enum":["Source","SourceAndTarget","Target"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.federationSpecification.connectionType","typeLabel":"enum\u003cstring>"},"sourceAuthenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.federationSpecification.sourceAuthenticationKey","typeLabel":"string"},"targetAuthenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.federationSpecification.targetAuthenticationKey","typeLabel":"string"}},"description":"Used to specify if an emitted relationship is federated, and if so, how Oleria can connect the participating objects in a composite graph\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.federationSpecification","typeLabel":"object"},"relationshipFromId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipFromId","typeLabel":"string"},"relationshipFromType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipFromType","typeLabel":"enum\u003cstring>"},"relationshipId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipId","typeLabel":"string"},"relationshipToId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipToId","typeLabel":"string"},"relationshipToType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipToType","typeLabel":"enum\u003cstring>"},"relationshipType":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipType","typeLabel":"enum\u003cstring>"},"relationshipTypeSpecificData":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.relationshipTypeSpecificData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2","typeLabel":"object"},{"type":"object","description":"Activity type specific data when activity type is an Oleria ActivityType","properties":{"entries":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.entries.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.entries.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.entries.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.entries","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.oleriaActivityTypeSpecificData","typeLabel":"object"},"uri":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2.uri","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.2","typeLabel":"object"},{"type":"object","description":"Information used to describe a label for data classification, data sensitivity, etc.\n","properties":{"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.description","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.3","typeLabel":"object"},{"type":"object","description":"Activity-specific data for the Ownership.* activity family. Carries the owner principal(s) for ownership state changes. EntityIdentifier (not LocallyUniqueAccountId) because owners can be non-account principals (ServicePrincipals, etc.). priorOwnerId is null for Ownership.Added; newOwnerId is null for Ownership.Removed; both populated for Ownership.Transferred.\n","properties":{"newOwnerId":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId.objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.newOwnerId","typeLabel":"object"},"priorOwnerId":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId.objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4.priorOwnerId","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.4","typeLabel":"object"},{"type":"object","description":"Details the information about a relationship (edge) associated with a Relationship.XXX activity","properties":{"federationSpecification":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.federationSpecification.isFederated","typeLabel":"boolean"},"connectionType":{"type":"string","enum":["Source","SourceAndTarget","Target"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.federationSpecification.connectionType","typeLabel":"enum\u003cstring>"},"sourceAuthenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.federationSpecification.sourceAuthenticationKey","typeLabel":"string"},"targetAuthenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.federationSpecification.targetAuthenticationKey","typeLabel":"string"}},"description":"Used to specify if an emitted relationship is federated, and if so, how Oleria can connect the participating objects in a composite graph\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.federationSpecification","typeLabel":"object"},"relationshipFromId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipFromId","typeLabel":"string"},"relationshipFromType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipFromType","typeLabel":"enum\u003cstring>"},"relationshipId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipId","typeLabel":"string"},"relationshipToId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipToId","typeLabel":"string"},"relationshipToType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipToType","typeLabel":"enum\u003cstring>"},"relationshipType":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipType","typeLabel":"enum\u003cstring>"},"relationshipTypeSpecificData":{"oneOf":[{"type":"object","description":"The EntitlementSpecification describes the entitlements associated with an AssignedAccessTo relationship used for access control entitlement or SSO entitlement purposes","properties":{"inferenceConfidence":{"type":"number","description":"If the entitlement is inferred, then this gives a confidence score between 0 and 1\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.0.inferenceConfidence","typeLabel":"number"},"isInferred":{"type":"boolean","description":"If false, then the specified entitlement is considered \"actual\" i.e. known with 100% confidence, if true, then the entitlement is inferred from some set of properties and the _inferenceConfidence_ indicates confidence in the \"reality\" of the entitlement given relevant data sources. Note: even if an entitlement has 100% confidence, authorized access via the entitlement always needs to be evaluated and tested in real-time\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.0.isInferred","typeLabel":"boolean"},"reason":{"type":"string","description":"EntitlementReason indicates why a particular entitlement has been assigned in the context of an EntitlementSpecification for an AssignedAccessTo relationship","enum":["AccessControl","MFA","SSO"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.0.reason","typeLabel":"enum\u003cstring>"},"reasonSpecificData":{"type":"any","description":"Reason specific data associated with entitlement AssignedAccessTo relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.0.reasonSpecificData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"The ImpersonationRestrictions describes any resource and scope (permission) restrictions that apply in the context of an impersonation relationship","required":["resourceSpecifierIsClass"],"properties":{"resourceSpecifierIsClass":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.resourceSpecifierIsClass","typeLabel":"boolean"},"resourceIdOrClass":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.resourceIdOrClass","typeLabel":"string"},"scopedPermissions":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions.specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1.scopedPermissions","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.1","typeLabel":"object"},{"type":"object","description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2.specificationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.2","typeLabel":"object"},{"type":"object","description":"Permission scoping data associated with membership in [Roles](#/components/schemas/Role) and [UserGroups](#/components/schemas/UserGroup)\n","properties":{"aggregateOwnershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.aggregateOwnershipLevel","typeLabel":"enum\u003cstring>"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.name","typeLabel":"string"},"specifications":{"type":"array","items":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX].specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3.specifications","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData.oneOf.3","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5.relationshipTypeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.5","typeLabel":"object"},{"type":"object","description":"Type-specific data for Authorization.UnmanagedApplication.Granted and Authorization.UnmanagedApplication.Revoked activity events. Carries the state of an OAuth grant from a user to a Shadow IT / unmanaged application discovered via IdP OAuth grant logs.\n\nAn unmanaged application is one where a user granted OAuth access via their own initiative, bypassing IT governance entirely. This is distinct from admin-provisioned SSO applications (EntitlementReason.SSO) and undergoverned applications (where an admin made a deliberate provisioning decision without full governance lifecycle).\n\nFor unmanaged application usage signals, see Endpoint.Access.AccountToUnmanagedApplication.Success/Failed — those activity types carry no type-specific data; scope usage is expressed via activatedPermissionSets on the Activity object.\n","required":["applicationName","grantedScopesStatus","vendorVerificationStatus"],"properties":{"applicationName":{"minLength":1,"type":"string","description":"Display name of the shadow/unmanaged app as reported by the IdP. If the IdP has no name, the source application should synthesize one from clientId.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationName","typeLabel":"string"},"grantedScopesStatus":{"type":"string","description":"Observability status of OAuth scopes granted to an unmanaged application. Distinguishes between scopes that are known, granted but not observable, and not granted at all.","enum":["GrantedAndObservable","GrantedButUnobservable","NotGranted"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.grantedScopesStatus","typeLabel":"enum\u003cstring>"},"vendorVerificationStatus":{"type":"string","description":"Whether the IdP has verified the identity of the vendor or publisher who registered the OAuth client. Used globally wherever vendor verification state is relevant.","enum":["Verified","Unverified","VerificationStatusUnknown"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.vendorVerificationStatus","typeLabel":"enum\u003cstring>"},"applicationDescription":{"type":"string","description":"Human-readable description of the unmanaged app from the IdP OAuth app registration. Primarily useful for human triage; lower-signal for platform risk scoring.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationDescription","typeLabel":"string"},"applicationMetadata":{"type":"array","description":"Application-specific additional context about the unmanaged application.","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.applicationMetadata","typeLabel":"object[]"},"clientId":{"type":"string","description":"OAuth client ID of the unmanaged app. Enables cross-tenant correlation of the same OAuth registration. Also serves as a fallback identifier when applicationName is ambiguous.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.clientId","typeLabel":"string"},"grantedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.grantedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.grantedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.grantedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"The OAuth scopes the user granted to the unmanaged app. Populated only when grantedScopesStatus is GrantedAndObservable.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.grantedScopes","typeLabel":"object"},"vendorName":{"type":"string","description":"Developer or vendor name as reported by the IdP. Consistent with vendorName usage on AssignedApplication, IntegratedApplication, and DirectoryProvider.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6.vendorName","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData.oneOf.6","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.oleriaActivityTypeSpecificData","typeLabel":"object"},"osName":{"type":"string","description":"The name of the operating system being used by the source of the activity if available","example":"OSX","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.osName","typeLabel":"string"},"osVersion":{"type":"string","description":"The version of the operating system being used by the source of the activity if available","example":"10.15.7","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.osVersion","typeLabel":"string"},"pageUri":{"type":"string","description":"The URI of the entity being used by the source of a web-based activity if applicable and available","format":"uri","example":"/lightning/r/Opportunity/006Dn000007rkDYIAY/view","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.pageUri","typeLabel":"string\u003curi>"},"requestorAccountFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.requestorAccountFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.requestorAccountFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.requestorAccountFederation","typeLabel":"object"},"requestorAccountId":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.requestorAccountId","typeLabel":"string"},"secondaryAffectedObjects":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2.secondaryAffectedObjects","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.2","typeLabel":"object"},{"type":"object","description":"An AssignedApplication object represents an enterprise SaaS application that has its access managed by an identity provider in the Oleria system. The identity provider may enumerate access to applications that are integrated or have not yet been integrated with Oleria (see the relationship definition UserGroupEntitledToAssignedApplication).","required":["id","name","objectMetadata"],"properties":{"id":{"type":"string","description":"An identifier for an [AssignedApplication](#/components/schemas/AssignedApplication) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.\n","example":"0oa1qcscnzkl4DTym1d8 (Okta)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.id","typeLabel":"string"},"name":{"type":"string","description":"The name of the assigned application","example":"GitHub Enterprise Cloud","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectMetadata","typeLabel":"object"},"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.authenticationRequirements","typeLabel":"object"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.labels","typeLabel":"object[]"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.objectDirectoryContainerId","typeLabel":"string"},"oauthClientId":{"type":"string","description":"Plain-text OAuth client ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.","example":"1234567890abcdef.apps.googleusercontent.com","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.oauthClientId","typeLabel":"string"},"samlEntityId":{"type":"string","description":"Plain-text SAML service provider entity ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.","example":"https://github.com/enterprises/acme-corp","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.samlEntityId","typeLabel":"string"},"vendorName":{"type":"string","description":"Name of the vendor for the enterprise application or identity provider product","example":"Microsoft","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3.vendorName","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.3","typeLabel":"object"},{"type":"object","description":"An authenticator represents an IDP configured authentication mechanism that is available for assignment, enrollment, and login\n","required":["authenticationKeys","authenticationMethods","id","isActive","name","objectMetadata"],"properties":{"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.id","typeLabel":"string"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationKeys.items.[INDEX]","typeLabel":"string"},"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationKeys","typeLabel":"string[]"},"authenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationMethods.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.authenticationMethods","typeLabel":"object[]"},"isActive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.isActive","typeLabel":"boolean"},"name":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.objectMetadata","typeLabel":"object"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4.description","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.4","typeLabel":"object"},{"type":"object","description":"An AuthenticatorEnrollment represents a specific account's enrollment in an Authenticator. It records the enrolled authentication methods, the account key used to correlate to an Account, the enrollment lifecycle (status, timestamps), and optional device binding (e.g., a biometric device registered for a HYPR authenticator enrollment).\n","required":["accountKey","authenticationMethods","enrolledAt","enrollmentStatus","id","objectMetadata"],"properties":{"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.id","typeLabel":"string"},"accountKey":{"type":"string","description":"The freeform string used by the authenticator provider to identify the enrolled account. Used by the platform to correlate this enrollment to an Account by matching against Account.alias, Account.email, or Account.alternateEmails via the authenticationKeys linkage.\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.accountKey","typeLabel":"string"},"authenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.authenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.authenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.authenticationMethods.items.[INDEX]","typeLabel":"object"},"description":"The authentication methods enrolled for this enrollment. Narrows the methods available on the parent Authenticator to those specifically active for this account enrollment.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.authenticationMethods","typeLabel":"object[]"},"enrollmentStatus":{"type":"string","enum":["Active","Pending","Revoked","Suspended"],"description":"The lifecycle status of an AuthenticatorEnrollment. Active indicates a fully enrolled and usable enrollment. Pending indicates enrollment initiated but not yet completed (e.g., device registration required). Revoked indicates the enrollment has been explicitly revoked. Suspended indicates the enrollment is temporarily inactive.\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.enrollmentStatus","typeLabel":"enum\u003cstring>"},"enrolledAt":{"type":"string","format":"date-time","description":"Timestamp when the enrollment was created","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.enrolledAt","typeLabel":"string\u003cdate-time>"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.objectMetadata","typeLabel":"object"},"revokedAt":{"type":"string","format":"date-time","description":"Timestamp when the enrollment was revoked (if applicable)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.revokedAt","typeLabel":"string\u003cdate-time>"},"deviceInfo":{"required":["deviceId","deviceType","registeredAt"],"type":"object","properties":{"deviceId":{"type":"string","description":"Unique identifier for the device as assigned by the authenticator provider","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.deviceInfo.deviceId","typeLabel":"string"},"deviceType":{"type":"string","description":"Type of device bound to this enrollment (e.g., TouchID, WindowsHello, YubiKey). Free-form string to accommodate provider-specific device taxonomies.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.deviceInfo.deviceType","typeLabel":"string"},"registeredAt":{"type":"string","format":"date-time","description":"Timestamp when the device was registered to this enrollment","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.deviceInfo.registeredAt","typeLabel":"string\u003cdate-time>"},"deviceName":{"type":"string","description":"Human-readable display name for the device, if provided by the authenticator provider","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.deviceInfo.deviceName","typeLabel":"string"}},"description":"Device binding information for an AuthenticatorEnrollment. Present when the authenticator requires a specific physical device (e.g., device-bound biometric or hardware security key).\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5.deviceInfo","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.5","typeLabel":"object"},{"type":"object","description":"Business department or division","required":["id","name","objectMetadata"],"properties":{"id":{"type":"string","description":"An identifier for a [Department](#/components/schemas/Department) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.\n","example":"A34938434","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.id","typeLabel":"string"},"name":{"type":"string","example":"Engineering","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectMetadata","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.authorizedLocations","typeLabel":"object"},"companyCode":{"type":"string","example":"E39284","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.companyCode","typeLabel":"string"},"createdDate":{"type":"string","description":"The date the _Department_ object was created\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.createdDate","typeLabel":"string\u003cdate-time>"},"lastModifiedDate":{"type":"string","description":"The date the _Department object was last modified\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.objectDirectoryContainerId","typeLabel":"string"},"type":{"type":"string","description":"The type for the _Department_ object allowing it to represent different types of organizational units (this can be used as a display name)\n","example":"Division, Business Unit","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6.type","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.6","typeLabel":"object"},{"type":"object","description":"This object is emitted by an IDP to indicate knowledge of and a sync relationship with (via [IntegratedApplicationRegisteredWithDirectoryProvider](#/components/schemas/IntegratedApplicationRegisteredWithDirectoryProvider)) a directory\n","required":["directoryIntegratedApplicationAuthenticationKey","directoryIntegratedApplicationInstanceKey","id","name","objectMetadata"],"properties":{"directoryIntegratedApplicationAuthenticationKey":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.directoryIntegratedApplicationAuthenticationKey","typeLabel":"string"},"directoryIntegratedApplicationInstanceKey":{"type":"string","description":"The unique application-specific key that maps to a specific service instance integrated with Oleria. This key is used to prevent instance collision when adding integrations to the system","example":"O_kgDOCfJllg (GitHub)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.directoryIntegratedApplicationInstanceKey","typeLabel":"string"},"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.id","typeLabel":"string"},"name":{"type":"string","description":"Name associated with this directory provider connnection\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectMetadata","typeLabel":"object"},"entitySync":{"type":"object","properties":{"attributeControls":{"type":"array","items":{"type":"object","properties":{"attributeSync":{"type":"array","items":{"type":"string","enum":["OnCreate","OnUpdate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].attributeSync.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].attributeSync","typeLabel":"enum\u003cstring>[]"},"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].id","typeLabel":"string"},"sourceAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].sourceAttributeName","typeLabel":"string"},"sourceEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].sourceEntityType","typeLabel":"enum\u003cstring>"},"targetAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].targetAttributeName","typeLabel":"string"},"targetEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX].targetEntityType","typeLabel":"enum\u003cstring>"}},"description":"An EntitySyncAttributeMapping expresses how specific account or group fields are mapped during sync of objects among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.attributeControls","typeLabel":"object[]"},"protocol":{"type":"string","description":"These specifiers are used to identify different protocols for syncing account and group information among IDPs, directories, and enterprise applications","enum":["AD","LDAP","SAML","SCIM"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.protocol","typeLabel":"enum\u003cstring>"},"protocolControls":{"type":"array","items":{"type":"string","description":"These specifiers are used to express the protocol actions used to sync accounts among IDPs, directories, and enterprise applications","enum":["Create","Deactivate","Delete","SyncPassword","Update"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.protocolControls.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync.protocolControls","typeLabel":"enum\u003cstring>[]"}},"description":"An EntitySyncSpecification expresses how accounts are synced among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.entitySync","typeLabel":"object"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.objectDirectoryContainerId","typeLabel":"string"},"vendorName":{"type":"string","description":"Name of the vendor for the directory provider product\n","example":"Microsoft","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7.vendorName","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.7","typeLabel":"object"},{"type":"object","description":"Employee at a business","required":["employmentType","id","objectMetadata","workName"],"properties":{"employmentType":{"type":"string","description":"Business assigned employment type\n","example":"Contingent Staff, Full-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.employmentType","typeLabel":"string"},"id":{"type":"string","description":"An identifier for an [Employee](#/components/schemas/Employee) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.\n","example":"E232235","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.id","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectMetadata","typeLabel":"object"},"workName":{"type":"string","description":"Full name used for employment purposes\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.workName","typeLabel":"string"},"assignedLocations":{"type":"array","description":"These are the locations assigned as delivery points for this _Employee_\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.assignedLocations","typeLabel":"object[]"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.authorizedLocations","typeLabel":"object"},"companyName":{"type":"string","description":"The official name of the employee's company","example":"Oleria Corporation","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.companyName","typeLabel":"string"},"costCenter":{"type":"string","description":"The cost center for the _Employee_\n","example":"232345","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.costCenter","typeLabel":"string"},"createdDate":{"type":"string","description":"The date the _Employee_ object was created\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.createdDate","typeLabel":"string\u003cdate-time>"},"employeeNumber":{"type":"string","description":"Business assigned _Employee_ number\n","example":"K34312","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.employeeNumber","typeLabel":"string"},"endDate":{"type":"string","description":"The _Employee_'s end date at the business\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.endDate","typeLabel":"string\u003cdate-time>"},"identityProofs":{"type":"array","items":{"type":"object","properties":{"countryOfId":{"type":"string","description":"ISO 3166-1 A-2 country code","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.identityProofs.items.[INDEX].countryOfId","typeLabel":"string"},"typeOfId":{"type":"string","description":"Type of the identity proof for the given country","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.identityProofs.items.[INDEX].typeOfId","typeLabel":"string"}},"description":"Indicates how the employee's identity was verified","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.identityProofs.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.identityProofs","typeLabel":"object[]"},"jobCode":{"type":"string","description":"Identifier of the _Employee_'s job or job profile, also known as the Job ID\n(Workday _Job Code_ — the Job Profile's reference ID; SuccessFactors _Job Classification_ code)\n","example":"343949","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.jobCode","typeLabel":"string"},"jobFamily":{"type":"string","description":"The job family the _Employee_'s job belongs to — a grouping of related jobs that\nshare core knowledge and background requirements (Workday and SuccessFactors _Job Family_).\nNarrower than _jobFamilyGroup_ and broader than _specialization_\n","example":"Software Engineering","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.jobFamily","typeLabel":"string"},"jobFamilyGroup":{"type":"string","description":"The broadest grouping of job families the _Employee_'s job belongs to\n(Workday _Job Family Group_)\n","example":"Technology","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.jobFamilyGroup","typeLabel":"string"},"jobFunction":{"type":"string","description":"The functional role or occupation the _Employee_ performs. A role-level descriptor,\nnot a broad grouping — occupational groupings belong in _jobFamily_ / _jobFamilyGroup_\n","example":"Software Architect","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.jobFunction","typeLabel":"string"},"lastDateWorked":{"type":"string","description":"The _Employee_'s last work date at the business (may be different from _endDate_)\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.lastDateWorked","typeLabel":"string\u003cdate-time>"},"lastModifiedDate":{"type":"string","description":"The date the _Employee_ object was last modified\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.objectDirectoryContainerId","typeLabel":"string"},"primaryWorkEmail":{"type":"string","description":"The primary email address of the _Employee_\n","format":"email","example":"kirt@oleria.com","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.primaryWorkEmail","typeLabel":"string\u003cemail>"},"resignationSubmissionDate":{"type":"string","description":"The _Employee_'s resignation date if applicable\n","format":"date-time","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.resignationSubmissionDate","typeLabel":"string\u003cdate-time>"},"specialization":{"type":"string","description":"A finer sub-discipline within the _Employee_'s _jobFamily_. There is no standard\nWorkday or SuccessFactors foundation field for this — it is sourced from an org-defined\nspecialty or sub-classification. Not the Workday _Job Category_ field, which is a\nregulatory/EEO classification. Distinct from the business _title_\n","example":"Site Reliability","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.specialization","typeLabel":"string"},"startDate":{"type":"string","description":"The _Employee_'s start date at the business\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.startDate","typeLabel":"string\u003cdate-time>"},"title":{"type":"string","description":"The _Employee_'s title\n","example":"Chief Architect","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.title","typeLabel":"string"},"workEmails":{"type":"array","description":"Array of work emails for the _Employee_ (must include the _primaryWorkEmail_ when present)\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.workEmails.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8.workEmails","typeLabel":"string[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.8","typeLabel":"object"},{"type":"object","description":"An IntegratedApplication object represents a registered and integrated enterprise SaaS application, identity provider, or directory in the Oleria system","required":["authenticationRequirements","category","id","key","name","objectMetadata"],"properties":{"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.authenticationRequirements","typeLabel":"object"},"category":{"type":"string","description":"Categories of application that can be integrated with Oleria\n","enum":["BusinessApplication","CloudDataService","CloudInfrastructure","Collaboration","Communications","CRM","CustomApplication","DeveloperTool","DirectoryService","Finance","HRIS","IdentityProvider","ITSM","LogAnalytics","Productivity","Security","Storage"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.category","typeLabel":"enum\u003cstring>"},"id":{"type":"string","description":"An identifier for an [IntegratedApplication](#/components/schemas/IntegratedApplication) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations. For the IntegratedApplication object this can be based on the key field\n","example":"app:O_kgDOCfJllg (GitHub)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.id","typeLabel":"string"},"key":{"type":"string","description":"The unique application-specific key that maps to a specific service instance integrated with Oleria. This key is used to prevent instance collision when adding integrations to the system","example":"O_kgDOCfJllg (GitHub)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.key","typeLabel":"string"},"name":{"minLength":1,"type":"string","description":"The name of application-specific service instance that has been integrated with Oleria e.g. GitHub organization, Salesforce instance, Google Workspace domain, Microsoft 365 tenant, etc. This is typically the unit of registration within the application of a customer's organization or enterprise and is associated with an IntegratedApplicationKey.","example":"roanokedatasecurity","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.objectMetadata","typeLabel":"object"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.labels","typeLabel":"object[]"},"supportedFederatedRelationships":{"type":"array","description":"An array of relationship types supported for federated connections e.g. [EntityAssignedAccessToObject](#/components/schemas/EntityAssignedAccessToObject) or [IdentityAccountMemberOfUserGroup](#/components/schemas/IdentityAccountMemberOfUserGroup). If federated connections are supported, then Oleria will use data in the edges emitted by the source application to do composite graph connections for the relevant source entities\n","items":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.supportedFederatedRelationships.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.supportedFederatedRelationships","typeLabel":"enum\u003cstring>[]"},"unsupportedTypes":{"type":"object","description":"Declares object and relationship types that this integration does not support despite its declared schema profile. Omitted when the integration fully satisfies its declared profile contract. See UnsupportedTypeSet for semantics.\n","properties":{"objectTypes":{"type":"array","description":"Object types not supported by this integration despite the declared schema profile. All relationships involving these types are implicitly excluded.","items":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.unsupportedTypes.objectTypes.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.unsupportedTypes.objectTypes","typeLabel":"enum\u003cstring>[]"},"relationshipTypes":{"type":"array","description":"Relationship types explicitly excluded where endpoint object types ARE still supported. Only needed for relationship-specific exclusions not covered by objectTypes closure.","items":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.unsupportedTypes.relationshipTypes.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.unsupportedTypes.relationshipTypes","typeLabel":"enum\u003cstring>[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.unsupportedTypes","typeLabel":"object"},"vendorName":{"type":"string","description":"Name of the vendor for the enterprise application or identity provider product","example":"Microsoft","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9.vendorName","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.9","typeLabel":"object"},{"type":"object","description":"An ObjectDirectory is an object representing a container of heterogeneous access control objects including [Account](#/components/schemas/Account), _ObjectDirectory_, [ResourceInstance](#/components/schemas/ResourceInstance), [Role](#/components/schemas/Role), and [UserGroup](#/components/schemas/UserGroup)\n","required":["id","name","objectMetadata","policyPropagation","policySettings","prohibitInheritedLabels","prohibitInheritedPermissions","resourceClass"],"properties":{"id":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.id","typeLabel":"string"},"name":{"type":"string","description":"Name of the object directory","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectMetadata","typeLabel":"object"},"policyPropagation":{"type":"string","enum":["ContainedWinsContainerIgnored","ContainerWinsContainedIgnored","MergeWithContainedWinsConflicts","MergeWithContainerWinsConflicts","NotApplicable"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policyPropagation","typeLabel":"enum\u003cstring>"},"policySettings":{"type":"object","properties":{"accessControlRoles":{"type":"array","description":"The roles that this policy applies to users and groups in the object directory subject to optional [Account](#/components/schemas/Account) and [UserGroup](#/components/schemas/UserGroup) filtering\n","items":{"type":"string","description":"An identifier (unique to the integrated application) for a [Role](#/components/schemas/Role) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"0PSHu000003fo6tOAA (Salesforce based on permission set ids)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.accessControlRoles.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.accessControlRoles","typeLabel":"string[]"},"accountFiltering":{"type":"array","description":"The subset of accounts to which this policy applies\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.accountFiltering.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.accountFiltering","typeLabel":"string[]"},"fullDataSet":{"type":"array","description":"Represents all policies applied in this container as an array of property bags\n","items":{"type":"object","properties":{"description":{"type":"string","description":"Description of the property bag","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].description","typeLabel":"string"},"id":{"type":"string","description":"Unique identifier for the property bag","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].id","typeLabel":"string"},"items":{"type":"array","description":"An array of properties associated with the property bag","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].\\items","typeLabel":"object[]"},"name":{"type":"string","description":"Name of the property bag","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX].name","typeLabel":"string"}},"description":"A named and identified collection of related properties expressed as an array of [MetadataItem](#/components/schemas/MetadataItem)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.fullDataSet","typeLabel":"object[]"},"userGroupFiltering":{"type":"array","description":"The subset of groups to which this policy applies\n","items":{"type":"string","description":"An identifier (unique to the integrated or assigned application) for a [UserGroup](#/components/schemas/UserGroup) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"team:T_kgDOLL0doQ (GitHub), 37d284db-1d76-4587-aa78-5a33cfcc021f:member (SharePoint)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.userGroupFiltering.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings.userGroupFiltering","typeLabel":"string[]"}},"description":"Policy settings associated with the ObjectDirectory specified as a property bag and some specific promoted properties\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.policySettings","typeLabel":"object"},"prohibitInheritedLabels":{"type":"boolean","description":"Inherited labels e.g. container -> contained are not allowed on this object directory. Only directly assigned labels are honored\n","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.prohibitInheritedLabels","typeLabel":"boolean"},"prohibitInheritedPermissions":{"type":"boolean","description":"Inherited permissions e.g. container -> contained are not allowed on this object directory. Only direct permissions are honored\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.prohibitInheritedPermissions","typeLabel":"boolean"},"resourceClass":{"type":"string","description":"The unique application-specific type of the _ObjectDirectory_ which connects it to a particular [ResourceClass](#/components/schemas/ResourceClass) via the _ResourceClass.name_ field\n","example":"repo","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.resourceClass","typeLabel":"string"},"applicationType":{"type":"string","description":"An application-specific type for the ObjectDirectory","example":"OU (AD), Environment (PingOne), Account (AWS), Management Group (Azure)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.applicationType","typeLabel":"string"},"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.authenticationRequirements","typeLabel":"object"},"description":{"type":"string","description":"Description of the object directory","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.description","typeLabel":"string"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.labels","typeLabel":"object[]"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryContainerId","typeLabel":"string"},"objectDirectoryLabels":{"type":"array","description":"An array of [ObjectDirectoryLabel](#/components/schemas/ObjectDirectoryLabel) designations\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryLabels.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.objectDirectoryLabels","typeLabel":"string[]"},"secondaryResourceClasses":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.secondaryResourceClasses.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10.secondaryResourceClasses","typeLabel":"string[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.10","typeLabel":"object"},{"type":"object","description":"A PermissionSet object represents a \"bundle\" of permissions used by an entity ([Account](#/components/schemas/Account), [Role](#/components/schemas/Role), or [UserGroup](#/components/schemas/UserGroup)) to access a [ResourceInstance](#/components/schemas/ResourceInstance) (or other objects). The AccessTo edges that go from the PermissionSet to the target object is where the specification of the permission is emitted e.g. see [PermissionSetAccessToResourceInstance](#/components/schemas/PermissionSetAccessToResourceInstance). Note that the PermissionSet object is being deprecated in favor of source applications emitting direct permission edges via [EntityAssignedAccessToObject](#/components/schemas/EntityAssignedAccessToObject)\n","deprecated":true,"properties":{"assignedObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.assignedObjectId","typeLabel":"string"},"cause":{"type":"string","description":"The application-specific reason the permission set has access to the resource","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.cause","typeLabel":"string"},"id":{"type":"string","description":"An identifier (unique to the integrated application) for a [PermissionSet](#/components/schemas/PermissionSet) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"permission:dNQ3VfJohqdsoPmBMn1UBZ1Qb-zcNJS1LwvF3K29-6Y= (GitHub based on a hash of underlying fine grained permission attributes and representing the equivalent of a fine grained permission set specific to a resource instance)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.id","typeLabel":"string"},"level":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.level","typeLabel":"enum\u003cstring>"},"name":{"minLength":1,"type":"string","description":"The name of the permission set","example":"private-repo permissions","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.name","typeLabel":"string"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectDirectoryContainerId","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.objectMetadata","typeLabel":"object"},"resourceClass":{"type":"string","description":"The application-specific class of resource the permission set has access to","example":"repo","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.resourceClass","typeLabel":"string"},"sourceTag":{"type":"string","description":"An application-specific tag representing the permission set information data source","example":"alpha","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11.sourceTag","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.11","typeLabel":"object"},{"type":"object","description":"A human","required":["id","name","objectMetadata"],"properties":{"id":{"type":"string","description":"An identifier for a [Person](#/components/schemas/Person) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.\n","example":"P232435","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.id","typeLabel":"string"},"name":{"type":"string","description":"The name of the person","example":"Kirt Debique","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectMetadata","typeLabel":"object"},"createdDate":{"type":"string","description":"The date the object was created","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.createdDate","typeLabel":"string\u003cdate-time>"},"lastModifiedDate":{"type":"string","description":"The date the object was last modified","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.objectDirectoryContainerId","typeLabel":"string"},"personalEmails":{"type":"array","description":"Array of personal emails for the _Person_ (must include the _primaryPersonalEmail_)\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalEmails.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalEmails","typeLabel":"string[]"},"personalLocations":{"type":"array","description":"These are the locations assigned as delivery points for this _Person_\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.personalLocations","typeLabel":"object[]"},"primaryPersonalEmail":{"type":"string","description":"Primary personal email for the _Person_\n","example":"kirt@bricklanerecords.com","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12.primaryPersonalEmail","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.12","typeLabel":"object"},{"type":"object","description":"A ResourceClass object represents a class of resource instances within an application e.g. Opportunities in Salesforce. It is application-defined whether or not resource instances are expressly grouped under Resource objects or if they are represented directly as ResourceInstance objects with relevant ResourceInstance-specific nesting","required":["id","name","objectMetadata"],"properties":{"id":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceClass](#/components/schemas/ResourceClass) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. Ideally this id is a straightforward derivation of the class name \n","example":"class:repo (GitHub based on resources)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.id","typeLabel":"string"},"name":{"minLength":1,"type":"string","description":"The name of the resource class (this may be different from displayName)","example":"repo","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.objectMetadata","typeLabel":"object"},"displayName":{"minLength":1,"type":"string","description":"The display name of the resource class (typically used to represent the resource class in a user experience)","example":"Repositories","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.displayName","typeLabel":"string"},"pageUri":{"type":"string","description":"The URI of the resource entity","format":"uri","example":"/lightning/r/Opportunity","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.pageUri","typeLabel":"string\u003curi>"},"sourceTag":{"type":"string","description":"An application-specific tag representing the resource class information data source","example":"GitHub","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13.sourceTag","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.13","typeLabel":"object"},{"type":"object","description":"A ResourceInstance object represents an application-specific instance of a resource controlled by the application's access control system e.g. Repositories in GitHub or Files in Google Drive","required":["id","isDeleted","name","objectMetadata","prohibitInheritedLabels","prohibitInheritedPermissions","resourceClass"],"properties":{"id":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.id","typeLabel":"string"},"isDeleted":{"type":"boolean","description":"Has this resource instance been deleted? A deleted resource instance may still be represented in the Oleria composite graph of an application's identity security","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.isDeleted","typeLabel":"boolean"},"name":{"minLength":1,"type":"string","description":"The name of the resource instance","example":"oleria","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectMetadata","typeLabel":"object"},"prohibitInheritedLabels":{"type":"boolean","description":"Inherited labels e.g. container -> contained are not allowed on this resource instance. Only directly assigned labels are honored\n","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.prohibitInheritedLabels","typeLabel":"boolean"},"prohibitInheritedPermissions":{"type":"boolean","description":"Inherited permissions e.g. container -> contained are not allowed on this resource instance. Only direct permissions are honored\n","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.prohibitInheritedPermissions","typeLabel":"boolean"},"resourceClass":{"type":"string","description":"The unique application-specific type of the _ResourceInstance_ which connects it to a particular [ResourceClass](#/components/schemas/ResourceClass) via the _ResourceClass.name_ field\n","example":"repo","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.resourceClass","typeLabel":"string"},"contentHashesOrFingerprints":{"type":"array","description":"Exposes [hashes or fingerprints](#/components/schemas/HashOrFingerprintAlgorithmPrefix) of the content represented by this _ResourceInstance_\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.contentHashesOrFingerprints.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.contentHashesOrFingerprints","typeLabel":"string[]"},"createdBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.createdBy","typeLabel":"string"},"createdByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.createdByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.createdByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.createdByFederation","typeLabel":"object"},"createdDate":{"type":"string","description":"The date the resource instance was created","format":"date-time","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.createdDate","typeLabel":"string\u003cdate-time>"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.labels","typeLabel":"object[]"},"lastModifiedBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.lastModifiedBy","typeLabel":"string"},"lastModifiedByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.lastModifiedByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.lastModifiedByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.lastModifiedByFederation","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the resource instance was last modified","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.objectDirectoryContainerId","typeLabel":"string"},"pageUri":{"type":"string","description":"The URI of the resource instance entity","format":"uri","example":"/lightning/r/Opportunity/006Dn000007rkDYIAY/view, https://github.com/roanokedatasecurity/oleria","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.pageUri","typeLabel":"string\u003curi>"},"secondaryResourceClasses":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.secondaryResourceClasses.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.secondaryResourceClasses","typeLabel":"string[]"},"sourceTag":{"type":"string","description":"An application-specific tag representing the resource instance information data source","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14.sourceTag","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.14","typeLabel":"object"},{"type":"object","description":"A RiskDefinition object represents a class of risk in the Oleria system","deprecated":true,"properties":{"consequence":{"type":"string","description":"The consequence of the risk being violated","example":"Personal access tokens are impersonation passkeys that can create significant security exposure if compromised.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.consequence","typeLabel":"string"},"id":{"type":"string","description":"A identifier for the definition (unique to the application)","example":"github-config-risk-org-has-personal-access-token-authorizations-with-no-expiration","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.id","typeLabel":"string"},"mappingId":{"type":"string","description":"A globally unique identifier used to map risk violations to definitions","example":"F7B2EE88-C51F-4FF1-AC23-BFB4082F7FD3","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.mappingId","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.objectMetadata","typeLabel":"object"},"recommendation":{"type":"string","description":"A recommendation for remediation of a risk violation","example":"Under SSO Linked Identity for the user, view access tokens and revoke the access token authorization","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.recommendation","typeLabel":"string"},"severity":{"type":"string","description":"The risk level of an Oleria activity, risk definition, or risk violation","example":"Critical","enum":["Critical","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.severity","typeLabel":"enum\u003cstring>"},"sourceTag":{"type":"string","description":"An application-specific tag representing the risk definition information data source","example":"GitHub Configuration Risks","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.sourceTag","typeLabel":"string"},"title":{"type":"string","description":"The title of the risk","example":"Organization should not have personal access tokens with NO expiration date","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.title","typeLabel":"string"},"type":{"type":"string","description":"The risk type indicates if this risk is associated with access, identity, or general security or application configuration issues","example":"Access","enum":["Access","Identity","Security"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.type","typeLabel":"enum\u003cstring>"},"violationDataType":{"type":"string","description":"A categorization of the data type of the risk violation giving an indication of both the affected object and the violation metadata as follows:\n\n| Data Type | Affected Object | Metadata |\n|-----------------------------|---------------------------------------------------------------------|-----------------------------|\n| Account | [Account](#/components/schemas/Account) | N/A |\n| AssignedApplication | [AssignedApplication](#/components/schemas/AssignedApplication) | N/A |\n| Certificate | [IntegratedApplication](#/components/schemas/IntegratedApplication) | PEM encoded certificate |\n| Configuration | [IntegratedApplication](#/components/schemas/IntegratedApplication) | N/A |\n","enum":["Account","AssignedApplication","Certificate","Configuration"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15.violationDataType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.15","typeLabel":"object"},{"type":"object","description":"A RiskViolation object represents a risk that has occurred","required":["affectedObjectId","affectedObjectType","id","mappingId","objectMetadata"],"properties":{"affectedObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.affectedObjectId","typeLabel":"string"},"affectedObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.affectedObjectType","typeLabel":"enum\u003cstring>"},"id":{"type":"string","description":"A identifier for the violation (unique to the application)","example":"A8C2EE88-D62F-5A01-BD33-C0C5082F80E4","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.id","typeLabel":"string"},"mappingId":{"type":"string","description":"A globally unique identifier used to map risk violations to definitions","example":"F7B2EE88-C51F-4FF1-AC23-BFB4082F7FD3","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.mappingId","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectMetadata","typeLabel":"object"},"affectedObjectFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.affectedObjectFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.affectedObjectFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.affectedObjectFederation","typeLabel":"object"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.objectDirectoryContainerId","typeLabel":"string"},"violationMetadata":{"type":"array","description":"A string to string array of additional metadata values associated with the risk violation","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16.violationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.16","typeLabel":"object"},{"type":"object","description":"A Role object represents a security role that can be assigned to accounts and groups in an application and is typically used in role-based access control (RBAC) systems to group and represents one or more sets of permissions that grant access to resources","required":["applicationRoleType","id","isCustom","name","objectMetadata","type"],"properties":{"applicationRoleType":{"type":"string","description":"This is an application-specific string indicating the type of role being represented by the Role object. Typically this is the information used to derive the RoleType specified in the Role.type field or something related to the source of the Role specified in Role.sourceTag","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.applicationRoleType","typeLabel":"string"},"id":{"type":"string","description":"An identifier (unique to the integrated application) for a [Role](#/components/schemas/Role) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"0PSHu000003fo6tOAA (Salesforce based on permission set ids)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.id","typeLabel":"string"},"isCustom":{"type":"boolean","description":"Is this a custom-defined role? If true, then the Role.type equals Custom","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.isCustom","typeLabel":"boolean"},"name":{"minLength":1,"type":"string","description":"The name of the role which is typically informative of the role's purpose for granting access to resources (see also description)","example":"oleria Repo Maintainers","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectMetadata","typeLabel":"object"},"type":{"type":"string","description":"The type of the role used to group permissions in role based access control (RBAC) systems and thus give access to particular resources are described as follows:\n1. _Custom_ roles are created by administrators or users (with sufficient privilege) to represent a custom set of permissions that grant unique access to application resources\n2. _Modeled_ roles are roles created to model access to resources in the application, but are not \"physically\" represented in the application's schema. An example of modeled roles are each repository's access roles in GitHub. These are represented as modeled roles in Oleria because each repository evaluates roie membership and access with its own virtual instance of the standard read, write, triage, maintain, and admin GitHub roles. \n3. _Standard_ roles are the documented or system installed application roles described by the application and represented in the Oleria schema\n","example":"Standard","enum":["Custom","Modeled","Standard"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.type","typeLabel":"enum\u003cstring>"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.authorizedLocations","typeLabel":"object"},"createdBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.createdBy","typeLabel":"string"},"createdByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.createdByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.createdByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.createdByFederation","typeLabel":"object"},"createdDate":{"type":"string","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.createdDate","typeLabel":"string\u003cdate-time>"},"description":{"type":"string","description":"The description of the role indicating its purpose in grouping permissions and granting access to resources","example":"oleria Repos Writers","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.description","typeLabel":"string"},"lastModifiedBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.lastModifiedBy","typeLabel":"string"},"lastModifiedByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.lastModifiedByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.lastModifiedByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.lastModifiedByFederation","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the role was last modified","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.objectDirectoryContainerId","typeLabel":"string"},"sourceTag":{"type":"string","description":"An application-specific tag representing the role information data source","example":"oleria","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17.sourceTag","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.17","typeLabel":"object"},{"type":"object","description":"A UserGroup object represents groups of accounts (users) associated with an application or IDP e.g. Google Groups, GitHub Teams, or Salesforce Groups","required":["applicationGroupType","id","name","objectMetadata","type"],"properties":{"applicationGroupType":{"type":"string","description":"This is an application-specific string indicating the type of group being represented by the UserGroup object. Typically this is the information used to derive the UserGroupType specified in the UserGroup.type field","example":"EmailDistributionList","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.applicationGroupType","typeLabel":"string"},"id":{"type":"string","description":"An identifier (unique to the integrated or assigned application) for a [UserGroup](#/components/schemas/UserGroup) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"team:T_kgDOLL0doQ (GitHub), 37d284db-1d76-4587-aa78-5a33cfcc021f:member (SharePoint)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.id","typeLabel":"string"},"name":{"minLength":1,"type":"string","description":"The name (title) of the group which is typically informative of the group's purpose for granting access to resources (see also description)","example":"AI Maintainers","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectMetadata","typeLabel":"object"},"type":{"type":"string","description":"The following group types are supported: \n1. _Built-in_ groups are used to represent system-defined groups that can be leveraged by the application administrator to give access to resources via roles and permissions assigned to the group. Account membership in built-in groups is typically explicit\n2. _Custom_ groups are created by administrators or users (with appropriate privilege) to give access to resources via roles and permissions assigned to the group. Account membership in custom groups is typically explicit\n3. _Dynamic_ groups are created by administrators or users (with appropriate privilege) where membership in the group is dynamic and based on a defined set of attributes evaluated either periodically or at access control evaluation\n4. _Modeled_ groups are an Oleria representation of an RBAC group like concept in the application typically used to represent concept like Everyone\n5. _Sync_ groups are synchronized between an identity provider and enterprise application (or directory)\n","example":"Custom","enum":["Built-in","Custom","Dynamic","Modeled","Sync"],"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.type","typeLabel":"enum\u003cstring>"},"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"type":"any","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"any"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authenticationRequirements","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.authorizedLocations","typeLabel":"object"},"createdBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.createdBy","typeLabel":"string"},"createdByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.createdByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.createdByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.createdByFederation","typeLabel":"object"},"createdDate":{"type":"string","description":"The date the group was created","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.createdDate","typeLabel":"string\u003cdate-time>"},"description":{"type":"string","description":"The description of the group","example":"AI Maintainers","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.description","typeLabel":"string"},"directoryEntryFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryEntryFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryEntryFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryEntryFederation","typeLabel":"object"},"directoryEntryId":{"type":"string","description":"The _directoryEntryId_ is emitted when this _UserGroup_ object is synced with an _UserGroup_ object emitted by a directory. The id here should match the synced _UserGroup.id_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryEntryId","typeLabel":"string"},"directoryProviderFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryProviderFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryProviderFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryProviderFederation","typeLabel":"object"},"directoryProviderId":{"type":"string","description":"The _directoryProviderId_ indicates the [DirectoryProvider](#/components/schemas/DirectoryProvider) defining the directory sync relationship for this group \n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.directoryProviderId","typeLabel":"string"},"email":{"type":"string","description":"The email address associated with the group","format":"email","example":"ai-maintainers@oleria.com","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.email","typeLabel":"string\u003cemail>"},"labels":{"type":"array","description":"Label tags associated with the group, particularly when used for data classification and sensitivity targeting \n","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.labels","typeLabel":"object[]"},"lastModifiedBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.lastModifiedBy","typeLabel":"string"},"lastModifiedByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.lastModifiedByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.lastModifiedByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.lastModifiedByFederation","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the group was last modified","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.lastModifiedDate","typeLabel":"string\u003cdate-time>"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.objectDirectoryContainerId","typeLabel":"string"},"profileMetadata":{"type":"array","description":"An array of profile key-value pairs extending the schema of the _UserGroup_ object \n","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.profileMetadata","typeLabel":"object[]"},"provisioning":{"type":"array","description":"An array detailing all participants in a provisioning relationship with this _UserGroup_\n","items":{"type":"object","properties":{"authenticationKey":{"type":"string","description":"Authentication key used to match the other side of the sync relationship","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].authenticationKey","typeLabel":"string"},"entitySync":{"type":"object","properties":{"attributeControls":{"type":"array","items":{"type":"object","properties":{"attributeSync":{"type":"array","items":{"type":"string","enum":["OnCreate","OnUpdate"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync","typeLabel":"enum\u003cstring>[]"},"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].id","typeLabel":"string"},"sourceAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceAttributeName","typeLabel":"string"},"sourceEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceEntityType","typeLabel":"enum\u003cstring>"},"targetAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetAttributeName","typeLabel":"string"},"targetEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetEntityType","typeLabel":"enum\u003cstring>"}},"description":"An EntitySyncAttributeMapping expresses how specific account or group fields are mapped during sync of objects among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.attributeControls","typeLabel":"object[]"},"protocol":{"type":"string","description":"These specifiers are used to identify different protocols for syncing account and group information among IDPs, directories, and enterprise applications","enum":["AD","LDAP","SAML","SCIM"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.protocol","typeLabel":"enum\u003cstring>"},"protocolControls":{"type":"array","items":{"type":"string","description":"These specifiers are used to express the protocol actions used to sync accounts among IDPs, directories, and enterprise applications","enum":["Create","Deactivate","Delete","SyncPassword","Update"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.protocolControls.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync.protocolControls","typeLabel":"enum\u003cstring>[]"}},"description":"An EntitySyncSpecification expresses how accounts are synced among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].entitySync","typeLabel":"object"},"syncKey":{"type":"string","description":"The syncKey identifies the matching entity used for the sync relationship and the syncMethod indicates how the sync is accomplished","example":"Oleria Repository Writers","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].syncKey","typeLabel":"string"},"syncMethod":{"type":"string","description":"Sync methods for user groups between IDPs and enterprise applications where the UserGroup.syncKey identifies the matching group name used for the sync relationship and the UserGroup.syncMethod is a SyncMethodType indicating how the sync is accomplished","enum":["ApplicationSpecific","Bidirectional","None","Pull","Push","Receive"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX].syncMethod","typeLabel":"enum\u003cstring>"}},"description":"For IDP to application provisioning sync (as distinct from directory provider sync), the _ProvisioningParticipant_ structure provides information about a specific IDP to application connection for an entity (account, group, role, etc.)\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.provisioning","typeLabel":"object[]"},"sourceTag":{"type":"string","description":"An application-specific tag representing the group information data source","example":"OrgTeams","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18.sourceTag","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData.oneOf.18","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectData","typeLabel":"object"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed reference to an entity (node) in the graph\n","uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus.participatingEntities","typeLabel":"object[]"}},"description":"_MFAStatus_ describes the MFA usage currently being enforced for an account including those derived from authentication policy, adaptive security requirements, authorized location constraints, and more. It also includes information about how MFA authentication is operationalized for the account via a list of participating entities such that a graph topology can be built to represent the source of the MFA policies being enforced\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].enrichedMFAStatus","typeLabel":"object"},"oleriaObjectMetadata":{"type":"object","properties":{"enrichmentVersion":{"type":"string","uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata.enrichmentVersion","typeLabel":"string"},"generatedTime":{"type":"string","format":"date-time","uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata.generatedTime","typeLabel":"string\u003cdate-time>"}},"description":"object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata","typeLabel":"object"},"accountRoleDisplayName":{"type":"string","example":"Org Members","uniqueKey":"\\items.items.[INDEX].accountRoleDisplayName","typeLabel":"string"},"alternateEmails":{"type":"array","items":{"type":"string","description":"Alternate email aliases for the account's primary email","format":"email","uniqueKey":"\\items.items.[INDEX].alternateEmails.items.[INDEX]","typeLabel":"string\u003cemail>"},"uniqueKey":"\\items.items.[INDEX].alternateEmails","typeLabel":"string\u003cemail>[]"},"approvedApplicationPermissions":{"type":"array","items":{"type":"object","properties":{"fineGrainedResourceClass":{"type":"string","description":"The class of resource that the _fineGrainedSpecifiers_ are associated with","example":"repo","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].fineGrainedResourceClass","typeLabel":"string"},"fineGrainedSpecifiers":{"type":"array","example":["manage_github_actions_permissions_policy","view_collaborators"],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].fineGrainedSpecifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].fineGrainedSpecifiers","typeLabel":"string[]"},"formattedScopes":{"type":"object","properties":{"specifiers":{"type":"array","description":"Formatted scopes as specified by type","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].formattedScopes.specifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].formattedScopes.specifiers","typeLabel":"string[]"},"type":{"type":"string","description":"The enumerated list of scope formats optionally specified in a PermissionSetSpecification","enum":["OAuth"],"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].formattedScopes.type","typeLabel":"enum\u003cstring>"}},"description":"Scope specification optionally specified in a PermissionSetSpecification","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].formattedScopes","typeLabel":"object"},"isCreate":{"type":"boolean","description":"Create access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isCreate","typeLabel":"boolean"},"isDelete":{"type":"boolean","description":"Delete access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isDelete","typeLabel":"boolean"},"isExecute":{"type":"boolean","description":"Execute access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isExecute","typeLabel":"boolean"},"isPrivileged":{"type":"boolean","description":"Privileged access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isPrivileged","typeLabel":"boolean"},"isRead":{"type":"boolean","description":"Read access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isRead","typeLabel":"boolean"},"isShare":{"type":"boolean","description":"Sharing access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isShare","typeLabel":"boolean"},"isUpdate":{"type":"boolean","description":"Update access permission","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].isUpdate","typeLabel":"boolean"},"ownershipLevel":{"type":"string","description":"The level of ownership of the permission granting access to a Resource or ResourceInstance:\n1. _AccessReviewOwner_ indicates that the assignee of the represented permission is a (or the) designated access reviewer and an owner from the perspective of Governance\n2. _NotApplicable_ indicates that a permission level is not relevant in the context of the permission set specification\n3. _Owner_ means that the assignee of the represented permission is also an owner of the Resource or ResourceInstance\n4. _User_ indicates that the assignee of the represented permission is simply a user or accessor or the Resource or ResourceInstance\n","example":"Owner","enum":["AccessReviewOwner","NotApplicable","Owner","User"],"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].ownershipLevel","typeLabel":"enum\u003cstring>"},"owners":{"type":"array","items":{"type":"object","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX].objectType","typeLabel":"enum\u003cstring>"}},"description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].owners","typeLabel":"object[]"},"permissionGroupId":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].permissionGroupId","typeLabel":"string"},"specificationMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX].specificationMetadata","typeLabel":"object[]"}},"description":"Coarse and fine grained specification of a set of permissions that can be associated with an Oleria object or relationship","uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationPermissions","typeLabel":"object[]"},"approvedApplicationUsages":{"type":"array","description":"Approved application usages associated with this account (see [ApprovedApplicationUsage](#/components/schemas/ApprovedApplicationUsage))\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].approvedApplicationUsages.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].approvedApplicationUsages","typeLabel":"string[]"},"assignedLocations":{"type":"array","description":"These are the locations assigned as delivery points for this _Account_. It is typically populated by identity providers in lieu of the definitive data coming from HRIS integrations\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].assignedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].assignedLocations","typeLabel":"object[]"},"authenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethods","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].authenticationMethodSelectionPolicy","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].authorizedLocations","typeLabel":"object"},"companyName":{"type":"string","description":"The name of the company or enterprise associated with the _Account_\n","example":"Oleria Corporation","uniqueKey":"\\items.items.[INDEX].companyName","typeLabel":"string"},"costCenter":{"type":"string","description":"The cost center associated with the owner of the _Account_\n","example":"232345","uniqueKey":"\\items.items.[INDEX].costCenter","typeLabel":"string"},"countryCode":{"type":"string","description":"ISO-3166-1 A-2 country code assigned to the account\n","example":"US","uniqueKey":"\\items.items.[INDEX].countryCode","typeLabel":"string"},"createdBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].createdBy","typeLabel":"string"},"createdByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].createdByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].createdByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].createdByFederation","typeLabel":"object"},"createdDate":{"type":"string","description":"The date the _Account_ was created\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].createdDate","typeLabel":"string\u003cdate-time>"},"department":{"type":"string","description":"The name of the company or enterprise department associated with the _Account_\n","example":"Platform Engineering","uniqueKey":"\\items.items.[INDEX].department","typeLabel":"string"},"directoryEntryFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].directoryEntryFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].directoryEntryFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].directoryEntryFederation","typeLabel":"object"},"directoryEntryId":{"type":"string","description":"The _directoryEntryId_ is emitted when this _Account_ object is synced with an _Account_ emitted by a directory. The id here should match the synced _Account.id_\n","uniqueKey":"\\items.items.[INDEX].directoryEntryId","typeLabel":"string"},"directoryProviderFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].directoryProviderFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].directoryProviderFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].directoryProviderFederation","typeLabel":"object"},"directoryProviderId":{"type":"string","description":"The _directoryProviderId_ indicates the [DirectoryProvider](#/components/schemas/DirectoryProvider) defining the sync relationship for this account\n","uniqueKey":"\\items.items.[INDEX].directoryProviderId","typeLabel":"string"},"displayName":{"type":"string","description":"The user experience displayable name of the _Account_ holder e.g. a nickname. If this field is not set, then Oleria will set its value to name during processing\n","example":"Kirtliness","uniqueKey":"\\items.items.[INDEX].displayName","typeLabel":"string"},"employeeNumber":{"type":"string","description":"The employee number associated with the _Account_ holder\n","example":"29375","uniqueKey":"\\items.items.[INDEX].employeeNumber","typeLabel":"string"},"expirationDate":{"type":"string","description":"The date the _Account_ expires if applicable\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].expirationDate","typeLabel":"string\u003cdate-time>"},"federationId":{"type":"string","description":"A FederationId is an account username override used in the context of an authenticated session or in some contexts an Oleria LocallyUniqueAccountId","example":"kirt@oleria.dev","uniqueKey":"\\items.items.[INDEX].federationId","typeLabel":"string"},"hashIdentifiers":{"type":"array","deprecated":true,"description":"**Deprecated** — emit a [Credential](#/components/schemas/Credential) together with a [CredentialAuthenticatesEntity](#/components/schemas/CredentialAuthenticatesEntity) to the account instead. Only certificate and public-key digests may be carried over into _fingerprints_; a digest of symmetric material such as an API key or token must not be, because the digest is itself a verifier. The hash identifiers are typically emitted in connection with Machine and Token accounts to expose the fact that they can be \"unlocked\" by access to key material matching the hash. The relevant [hash algorithm prefix](#/components/schemas/HashOrFingerprintAlgorithmPrefix) plus the hash are added to the array of strings so they can be connected to owner or steward accounts by Oleria\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].hashIdentifiers.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].hashIdentifiers","typeLabel":"string[]"},"jobCode":{"type":"string","description":"Identifier of the job or job profile of the _Account_'s owner, also known as the Job ID\n(Workday _Job Code_ — the Job Profile's reference ID; SuccessFactors _Job Classification_ code)\n","example":"343949","uniqueKey":"\\items.items.[INDEX].jobCode","typeLabel":"string"},"jobFamily":{"type":"string","description":"The job family of the _Account_ owner's job — a grouping of related jobs that share\ncore knowledge and background requirements (Workday and SuccessFactors _Job Family_).\nNarrower than _jobFamilyGroup_ and broader than _specialization_\n","example":"Software Engineering","uniqueKey":"\\items.items.[INDEX].jobFamily","typeLabel":"string"},"jobFamilyGroup":{"type":"string","description":"The broadest grouping of job families for the _Account_ owner's job\n(Workday _Job Family Group_)\n","example":"Technology","uniqueKey":"\\items.items.[INDEX].jobFamilyGroup","typeLabel":"string"},"jobFunction":{"type":"string","description":"The functional role or occupation of the _Account_'s owner. A role-level descriptor,\nnot a broad grouping — occupational groupings belong in _jobFamily_ / _jobFamilyGroup_\n","example":"Product Manager","uniqueKey":"\\items.items.[INDEX].jobFunction","typeLabel":"string"},"lastActivityDate":{"type":"string","description":"The date of the last activity performed by the _Account_\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].lastActivityDate","typeLabel":"string\u003cdate-time>"},"lastModifiedBy":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].lastModifiedBy","typeLabel":"string"},"lastModifiedByFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].lastModifiedByFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].lastModifiedByFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].lastModifiedByFederation","typeLabel":"object"},"lastModifiedDate":{"type":"string","description":"The date the _Account_ was last modified\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].lastModifiedDate","typeLabel":"string\u003cdate-time>"},"lastPasswordChangedDate":{"type":"string","description":"The date the _Account_ password was last changed\n","format":"date-time","example":"2024-05-02T03:17:34.948Z","uniqueKey":"\\items.items.[INDEX].lastPasswordChangedDate","typeLabel":"string\u003cdate-time>"},"licenseLevel":{"type":"string","description":"The license regime under which the account is currently active or was last activated","example":"Paid","enum":["Free","NotApplicable","Paid","Unassigned","Unavailable"],"uniqueKey":"\\items.items.[INDEX].licenseLevel","typeLabel":"enum\u003cstring>"},"licenseStatus":{"type":"string","description":"Is the account license active or inactive?","example":"Active","enum":["Active","Inactive","NotApplicable"],"uniqueKey":"\\items.items.[INDEX].licenseStatus","typeLabel":"enum\u003cstring>"},"licenseType":{"type":"string","description":"The application-specific license type (or plan) used by the _Account_\n","example":"Enterprise Plan","uniqueKey":"\\items.items.[INDEX].licenseType","typeLabel":"string"},"managerEmails":{"type":"array","description":"Array of manager emails for the employee that has the _Account_\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].managerEmails.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].managerEmails","typeLabel":"string[]"},"name":{"minLength":1,"type":"string","description":"The name (ideally full name) of the _Account_ holder\n","example":"Kirt Debique","uniqueKey":"\\items.items.[INDEX].name","typeLabel":"string"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerId","typeLabel":"string"},"profileMetadata":{"type":"array","description":"An array of profile key-value pairs extending the schema of the _Account_ object\n","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].profileMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].profileMetadata","typeLabel":"object[]"},"provisioning":{"type":"array","items":{"type":"object","properties":{"authenticationKey":{"type":"string","description":"Authentication key used to match the other side of the sync relationship","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].authenticationKey","typeLabel":"string"},"entitySync":{"type":"object","properties":{"attributeControls":{"type":"array","items":{"type":"object","properties":{"attributeSync":{"type":"array","items":{"type":"string","enum":["OnCreate","OnUpdate"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].attributeSync","typeLabel":"enum\u003cstring>[]"},"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].id","typeLabel":"string"},"sourceAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceAttributeName","typeLabel":"string"},"sourceEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].sourceEntityType","typeLabel":"enum\u003cstring>"},"targetAttributeName":{"type":"string","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetAttributeName","typeLabel":"string"},"targetEntityType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX].targetEntityType","typeLabel":"enum\u003cstring>"}},"description":"An EntitySyncAttributeMapping expresses how specific account or group fields are mapped during sync of objects among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.attributeControls","typeLabel":"object[]"},"protocol":{"type":"string","description":"These specifiers are used to identify different protocols for syncing account and group information among IDPs, directories, and enterprise applications","enum":["AD","LDAP","SAML","SCIM"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.protocol","typeLabel":"enum\u003cstring>"},"protocolControls":{"type":"array","items":{"type":"string","description":"These specifiers are used to express the protocol actions used to sync accounts among IDPs, directories, and enterprise applications","enum":["Create","Deactivate","Delete","SyncPassword","Update"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.protocolControls.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync.protocolControls","typeLabel":"enum\u003cstring>[]"}},"description":"An EntitySyncSpecification expresses how accounts are synced among IDPs, directories, and enterprise applications","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].entitySync","typeLabel":"object"},"syncKey":{"type":"string","description":"The syncKey identifies the matching entity used for the sync relationship and the syncMethod indicates how the sync is accomplished","example":"Oleria Repository Writers","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].syncKey","typeLabel":"string"},"syncMethod":{"type":"string","description":"Sync methods for user groups between IDPs and enterprise applications where the UserGroup.syncKey identifies the matching group name used for the sync relationship and the UserGroup.syncMethod is a SyncMethodType indicating how the sync is accomplished","enum":["ApplicationSpecific","Bidirectional","None","Pull","Push","Receive"],"uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX].syncMethod","typeLabel":"enum\u003cstring>"}},"description":"For IDP to application provisioning sync (as distinct from directory provider sync), the _ProvisioningParticipant_ structure provides information about a specific IDP to application connection for an entity (account, group, role, etc.)\n","uniqueKey":"\\items.items.[INDEX].provisioning.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].provisioning","typeLabel":"object[]"},"secondaryAccountRoles":{"type":"array","description":"Additional underlying account roles associated with the _Account_ object\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].secondaryAccountRoles.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].secondaryAccountRoles","typeLabel":"string[]"},"sourceTag":{"type":"string","description":"An application-specific tag representing the _Account_ information data source\n","example":"OrgOwners","uniqueKey":"\\items.items.[INDEX].sourceTag","typeLabel":"string"},"specialization":{"type":"string","description":"A finer sub-discipline within the _Account_ owner's _jobFamily_. There is no standard\nWorkday or SuccessFactors foundation field for this — it is sourced from an org-defined\nspecialty or sub-classification. Not the Workday _Job Category_ field, which is a\nregulatory/EEO classification. Distinct from the business _title_\n","example":"Site Reliability","uniqueKey":"\\items.items.[INDEX].specialization","typeLabel":"string"},"title":{"type":"string","description":"The job title of the _Account_ holder\n","example":"Chief Architect","uniqueKey":"\\items.items.[INDEX].title","typeLabel":"string"},"globalAuthorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].globalAuthorizedLocations","typeLabel":"object"},"globalCreatedBy":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalCreatedBy","typeLabel":"string"},"globalDirectoryEntryId":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalDirectoryEntryId","typeLabel":"string"},"globalDirectoryProviderId":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalDirectoryProviderId","typeLabel":"string"},"globalLastModifiedBy":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalLastModifiedBy","typeLabel":"string"},"globalObjectDirectoryContainerId":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalObjectDirectoryContainerId","typeLabel":"string"},"globalProfileMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalProfileMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalProfileMetadata","typeLabel":"object[]"},"enrichedDataClassifications":{"type":"array","items":{"type":"object","properties":{"businessImpact":{"type":"string","description":"Impact of compromise of a secured information on the business or customer (enumeration ordered descending by criticality)","enum":["MissionCritical","Critical","High","Moderate","Low","None"],"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].businessImpact","typeLabel":"enum\u003cstring>"},"compliance":{"type":"array","items":{"type":"string","description":"Data compliance standards and information security categories that a security classification may be used in","enum":["CCPA","CDPA","COPPA","CPA","GDPR","GLB","HIPAA","ISO-27001","ISO-27018","PCI","PII","SOC","SOC2","UCPA"],"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].compliance.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].compliance","typeLabel":"enum\u003cstring>[]"},"customerImpact":{"type":"string","description":"Impact of compromise of a secured information on the business or customer (enumeration ordered descending by criticality)","enum":["MissionCritical","Critical","High","Moderate","Low","None"],"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].customerImpact","typeLabel":"enum\u003cstring>"},"dataSensitivity":{"type":"string","description":"Sensitivity of the data associated with a resource (enumeration ordered descending by sensitivity)","enum":["TopSecret","Secret","Confidential","ExtremelySensitive","Protected","AuthorizedDisclosure","Open","NotApplicable"],"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].dataSensitivity","typeLabel":"enum\u003cstring>"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].description","typeLabel":"string"},"id":{"type":"string","description":"An identifier for a specific data classification associated with an integrated application instance","uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX].name","typeLabel":"string"}},"description":"DataClassification objects are emitted by integrated applications to indicate classification labels that have been created in the enterprise application system and assigned certain impact level, compliance regime, and data sensitivity properties where applicable. The Oleria aggregates these classifications across integrated applications and allows security teams customize as well as group by, filter by, and order by these labels when reviewing identity security and access information","uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].enrichedDataClassifications","typeLabel":"object[]"},"enrichedNonHumanIdentityRisk":{"type":"object","description":"Aggregate access-risk posture for a non-human identity (Machine/Token account), derived from its\nimpersonation and application-assignment relationships. Omitted for human accounts.\n","properties":{"permissionLevel":{"type":"string","description":"Sensitivity and breadth of the permissions the identity can exercise - what actions it can perform.\n","enum":["High","Medium","Low","None","Unknown"],"example":"High","uniqueKey":"\\items.items.[INDEX].enrichedNonHumanIdentityRisk.permissionLevel","typeLabel":"enum\u003cstring>"},"privilegeLevel":{"type":"string","description":"Degree of administrative elevation of the identity's access - how privileged it is.\n","enum":["High","Medium","Low","None","Unknown"],"example":"High","uniqueKey":"\\items.items.[INDEX].enrichedNonHumanIdentityRisk.privilegeLevel","typeLabel":"enum\u003cstring>"},"scopeLevel":{"type":"string","description":"Breadth of the access surface the identity can reach - how broad its reachable targets are.\n","enum":["High","Medium","Low","None","Unknown"],"example":"High","uniqueKey":"\\items.items.[INDEX].enrichedNonHumanIdentityRisk.scopeLevel","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].enrichedNonHumanIdentityRisk","typeLabel":"object"},"enrichedNormalizedAlternateEmails":{"type":"array","description":"Normalized version of each alternate email found in Account.AlternateEmails","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].enrichedNormalizedAlternateEmails.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].enrichedNormalizedAlternateEmails","typeLabel":"string[]"},"analyticsAccessToResourceInstancesCount":{"oneOf":[{"type":"integer","format":"int64","description":"Cached count of distinct resource instances of every resource class that this account can access through direct\ngrants, grants on the groups and roles it is a member of (up to 30 levels of nesting), and containment (granted\nresource instances and everything nested under them, up to 30 containment levels). A grant on a resource class\ncovers each of its instances. For a non-human identity (Machine/Token account) it also includes access through the\naccounts it can impersonate, but not through accounts those can in turn impersonate: an impersonated account's\ndirect and group- or role-inherited access when the impersonation records no restriction; otherwise the resource\ninstances the restriction names, and the resource instances of the restricted resource classes that the\nimpersonated account is granted directly or through its groups and roles, each with everything nested under them\nup to 30 containment levels. The count is not capped. It can lag the latest sync.\n","uniqueKey":"\\items.items.[INDEX].analyticsAccessToResourceInstancesCount.oneOf.0","typeLabel":"integer\u003cint64>"},{"type":"null","format":"int64","description":"Cached count of distinct resource instances of every resource class that this account can access through direct\ngrants, grants on the groups and roles it is a member of (up to 30 levels of nesting), and containment (granted\nresource instances and everything nested under them, up to 30 containment levels). A grant on a resource class\ncovers each of its instances. For a non-human identity (Machine/Token account) it also includes access through the\naccounts it can impersonate, but not through accounts those can in turn impersonate: an impersonated account's\ndirect and group- or role-inherited access when the impersonation records no restriction; otherwise the resource\ninstances the restriction names, and the resource instances of the restricted resource classes that the\nimpersonated account is granted directly or through its groups and roles, each with everything nested under them\nup to 30 containment levels. The count is not capped. It can lag the latest sync.\n","uniqueKey":"\\items.items.[INDEX].analyticsAccessToResourceInstancesCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsAccessToResourceInstancesCount","typeLabel":"integer\u003cint64> | null"},"analyticsAssignedApplicationCount":{"oneOf":[{"type":"integer","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedApplicationCount.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedApplicationCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsAssignedApplicationCount","typeLabel":"integer\u003cint32> | null"},"analyticsAssignedGroupCount":{"oneOf":[{"type":"integer","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedGroupCount.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedGroupCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsAssignedGroupCount","typeLabel":"integer\u003cint32> | null"},"analyticsAssignedOwners":{"type":"array","description":"Names of owners assigned through Oleria's ownership-governance workflow - for example,\nnon-human-identity ownership assignment.\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].analyticsAssignedOwners.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].analyticsAssignedOwners","typeLabel":"string[]"},"analyticsAssignedRoleCount":{"oneOf":[{"type":"integer","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedRoleCount.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsAssignedRoleCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsAssignedRoleCount","typeLabel":"integer\u003cint32> | null"},"analyticsDataLabelsCount":{"oneOf":[{"type":"integer","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsDataLabelsCount.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsDataLabelsCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsDataLabelsCount","typeLabel":"integer\u003cint32> | null"},"analyticsDaysSinceLastActivity":{"oneOf":[{"type":"integer","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsDaysSinceLastActivity.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","uniqueKey":"\\items.items.[INDEX].analyticsDaysSinceLastActivity.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsDaysSinceLastActivity","typeLabel":"integer\u003cint32> | null"},"analyticsDisabledDate":{"oneOf":[{"type":"string","format":"date-time","description":"Most recent date this account was observed disabled via activity. Null when no Account.Disabled\nactivity has been observed for this account (including after a later re-enable). This does not\nnecessarily mean the account is currently enabled - see Account.enabled for the source-reported state,\nsince some accounts may be disabled without Oleria ever observing a corresponding activity (e.g. a\ndisable that predates activity capture, or an integration whose audit-log coverage excludes it).\n","uniqueKey":"\\items.items.[INDEX].analyticsDisabledDate.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","description":"Most recent date this account was observed disabled via activity. Null when no Account.Disabled\nactivity has been observed for this account (including after a later re-enable). This does not\nnecessarily mean the account is currently enabled - see Account.enabled for the source-reported state,\nsince some accounts may be disabled without Oleria ever observing a corresponding activity (e.g. a\ndisable that predates activity capture, or an integration whose audit-log coverage excludes it).\n","uniqueKey":"\\items.items.[INDEX].analyticsDisabledDate.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsDisabledDate","typeLabel":"string\u003cdate-time> | null"},"analyticsImpersonationTargetCount":{"oneOf":[{"type":"integer","format":"int32","description":"Number of user accounts this non-human identity (Machine/Token account) can impersonate - a\nblast-radius indicator for NHI access risk. 0 when the identity has no impersonation reach. Null for\nhuman accounts or when not computed.\n","uniqueKey":"\\items.items.[INDEX].analyticsImpersonationTargetCount.oneOf.0","typeLabel":"integer\u003cint32>"},{"type":"null","format":"int32","description":"Number of user accounts this non-human identity (Machine/Token account) can impersonate - a\nblast-radius indicator for NHI access risk. 0 when the identity has no impersonation reach. Null for\nhuman accounts or when not computed.\n","uniqueKey":"\\items.items.[INDEX].analyticsImpersonationTargetCount.oneOf.1","typeLabel":"null"}],"uniqueKey":"\\items.items.[INDEX].analyticsImpersonationTargetCount","typeLabel":"integer\u003cint32> | null"},"analyticsLastActivityDate":{"type":"string","format":"date-time","description":"Most recent activity observed on this account.\n","uniqueKey":"\\items.items.[INDEX].analyticsLastActivityDate","typeLabel":"string\u003cdate-time>"},"analyticsSourceOwners":{"type":"array","description":"Names of owners derived from the source system's management relationships.\n","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].analyticsSourceOwners.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].analyticsSourceOwners","typeLabel":"string[]"},"sorPrimaryStewardEmail":{"type":"string","uniqueKey":"\\items.items.[INDEX].sorPrimaryStewardEmail","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"\\items","typeLabel":"object[]"},"nextPageToken":{"type":"string","description":"Opaque token for the next page; pass it back as `pageToken`. Present whenever more pages remain, including when this page is empty because the results are still being prepared, and absent only once the collection is fully returned. Do not parse or construct it.","uniqueKey":"nextPageToken","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"items":[{"accountRole":"MEMBER","alias":"kirtd-oleria","authenticationFunctions":["\u003cstring>"],"email":"kirt@oleria.com","enabled":true,"hasAPIAccess":false,"id":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","isAdmin":true,"mfaRequirements":"Required","objectMetadata":{"ApplicationInstanceId":"\u003cstring>","GeneratedTime":"2023-11-07T05:31:56Z","Profile":"Account","ObjectOrRelationshipType":"\u003cstring>"},"ssoRequirements":"Required","subType":"Standard","type":"User","globalId":"\u003cstring>","enrichedNormalizedEmail":"\u003cstring>","enrichedSharingRiskCategory":"AnonymousEndpoint","enrichedMFAStatus":{"adaptiveAuthenticationMethodSelectionPolicies":[{"policy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"riskLevel":"Critical"}],"authenticationMethodSelectionPolicies":[{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]}],"enforcementStatus":"AdaptiveAndEnforced","enrolledAuthenticationMethods":{"entries":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"enforcedAuthenticationMethods":{"entries":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"participatingEntities":[{"objectData":{"accountRole":"MEMBER","alias":"kirtd-oleria","authenticationFunctions":["\u003cstring>"],"email":"kirt@oleria.com","enabled":true,"hasAPIAccess":false,"id":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","isAdmin":true,"mfaRequirements":"Required","objectMetadata":{"ApplicationInstanceId":"\u003cstring>","GeneratedTime":"2023-11-07T05:31:56Z","Profile":"Account","ObjectOrRelationshipType":"\u003cstring>"},"ssoRequirements":"Required","subType":"Standard","type":"User","accountRoleDisplayName":"Org Members","alternateEmails":["jsmith@example.com"],"approvedApplicationPermissions":[{"fineGrainedResourceClass":"repo","fineGrainedSpecifiers":["manage_github_actions_permissions_policy","view_collaborators"],"formattedScopes":{"specifiers":["\u003cstring>"],"type":"OAuth"},"isCreate":true,"isDelete":true,"isExecute":true,"isPrivileged":true,"isRead":true,"isShare":true,"isUpdate":true,"ownershipLevel":"Owner","owners":[{"federationInformation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"objectId":"\u003cstring>","objectType":"Account"}],"permissionGroupId":"\u003cstring>","specificationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}],"approvedApplicationUsages":["\u003cstring>"],"assignedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}],"authenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"companyName":"Oleria Corporation","costCenter":"232345","countryCode":"US","createdBy":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","createdByFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"createdDate":"2024-05-02T03:17:34.948Z","department":"Platform Engineering","directoryEntryFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"directoryEntryId":"\u003cstring>","directoryProviderFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"directoryProviderId":"\u003cstring>","displayName":"Kirtliness","employeeNumber":"29375","expirationDate":"2024-05-02T03:17:34.948Z","federationId":"kirt@oleria.dev","hashIdentifiers":["\u003cstring>"],"jobCode":"343949","jobFamily":"Software Engineering","jobFamilyGroup":"Technology","jobFunction":"Product Manager","lastActivityDate":"2024-05-02T03:17:34.948Z","lastModifiedBy":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","lastModifiedByFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"lastModifiedDate":"2024-05-02T03:17:34.948Z","lastPasswordChangedDate":"2024-05-02T03:17:34.948Z","licenseLevel":"Paid","licenseStatus":"Active","licenseType":"Enterprise Plan","managerEmails":["\u003cstring>"],"name":"Kirt Debique","objectDirectoryContainerFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"objectDirectoryContainerId":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","profileMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"provisioning":[{"authenticationKey":"\u003cstring>","entitySync":{"attributeControls":[{"attributeSync":["OnCreate"],"id":"\u003cstring>","sourceAttributeName":"\u003cstring>","sourceEntityType":"Account","targetAttributeName":"\u003cstring>","targetEntityType":"Account"}],"protocol":"AD","protocolControls":["Create"]},"syncKey":"Oleria Repository Writers","syncMethod":"ApplicationSpecific"}],"secondaryAccountRoles":["\u003cstring>"],"sourceTag":"OrgOwners","specialization":"Site Reliability","title":"Chief Architect"},"objectType":"Account"}]},"oleriaObjectMetadata":{"enrichmentVersion":"\u003cstring>","generatedTime":"2023-11-07T05:31:56Z"},"accountRoleDisplayName":"Org Members","alternateEmails":["jsmith@example.com"],"approvedApplicationPermissions":[{"fineGrainedResourceClass":"repo","fineGrainedSpecifiers":["manage_github_actions_permissions_policy","view_collaborators"],"formattedScopes":{"specifiers":["\u003cstring>"],"type":"OAuth"},"isCreate":true,"isDelete":true,"isExecute":true,"isPrivileged":true,"isRead":true,"isShare":true,"isUpdate":true,"ownershipLevel":"Owner","owners":[{"federationInformation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"objectId":"\u003cstring>","objectType":"Account"}],"permissionGroupId":"\u003cstring>","specificationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}],"approvedApplicationUsages":["\u003cstring>"],"assignedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}],"authenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"companyName":"Oleria Corporation","costCenter":"232345","countryCode":"US","createdBy":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","createdByFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"createdDate":"2024-05-02T03:17:34.948Z","department":"Platform Engineering","directoryEntryFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"directoryEntryId":"\u003cstring>","directoryProviderFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"directoryProviderId":"\u003cstring>","displayName":"Kirtliness","employeeNumber":"29375","expirationDate":"2024-05-02T03:17:34.948Z","federationId":"kirt@oleria.dev","hashIdentifiers":["\u003cstring>"],"jobCode":"343949","jobFamily":"Software Engineering","jobFamilyGroup":"Technology","jobFunction":"Product Manager","lastActivityDate":"2024-05-02T03:17:34.948Z","lastModifiedBy":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","lastModifiedByFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"lastModifiedDate":"2024-05-02T03:17:34.948Z","lastPasswordChangedDate":"2024-05-02T03:17:34.948Z","licenseLevel":"Paid","licenseStatus":"Active","licenseType":"Enterprise Plan","managerEmails":["\u003cstring>"],"name":"Kirt Debique","objectDirectoryContainerFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"objectDirectoryContainerId":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","profileMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"provisioning":[{"authenticationKey":"\u003cstring>","entitySync":{"attributeControls":[{"attributeSync":["OnCreate"],"id":"\u003cstring>","sourceAttributeName":"\u003cstring>","sourceEntityType":"Account","targetAttributeName":"\u003cstring>","targetEntityType":"Account"}],"protocol":"AD","protocolControls":["Create"]},"syncKey":"Oleria Repository Writers","syncMethod":"ApplicationSpecific"}],"secondaryAccountRoles":["\u003cstring>"],"sourceTag":"OrgOwners","specialization":"Site Reliability","title":"Chief Architect","globalAuthorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"globalCreatedBy":"\u003cstring>","globalDirectoryEntryId":"\u003cstring>","globalDirectoryProviderId":"\u003cstring>","globalLastModifiedBy":"\u003cstring>","globalObjectDirectoryContainerId":"\u003cstring>","globalProfileMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"enrichedDataClassifications":[{"businessImpact":"MissionCritical","compliance":["CCPA"],"customerImpact":"MissionCritical","dataSensitivity":"TopSecret","description":"\u003cstring>","id":"\u003cstring>","name":"\u003cstring>"}],"enrichedNonHumanIdentityRisk":{"permissionLevel":"High","privilegeLevel":"High","scopeLevel":"High"},"enrichedNormalizedAlternateEmails":["\u003cstring>"],"analyticsAccessToResourceInstancesCount":123,"analyticsAssignedApplicationCount":123,"analyticsAssignedGroupCount":123,"analyticsAssignedOwners":["\u003cstring>"],"analyticsAssignedRoleCount":123,"analyticsDataLabelsCount":123,"analyticsDaysSinceLastActivity":123,"analyticsDisabledDate":"2023-11-07T05:31:56Z","analyticsImpersonationTargetCount":123,"analyticsLastActivityDate":"2023-11-07T05:31:56Z","analyticsSourceOwners":["\u003cstring>"],"sorPrimaryStewardEmail":"\u003cstring>"}],"nextPageToken":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"},"5b0414a9-1f0d-4add-98a3-98395639d4c6":{"description":"The request was malformed, for example an invalid cursor or page size.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"BAD_REQUEST","message":"The request was malformed."},"examples":{"Example":{"title":"Example","value":{"code":"BAD_REQUEST","message":"The request was malformed."}}},"exampleType":"examples"}},"exampleType":"examples"},"1c6ebda2-74d2-43d2-abeb-ecf691db1270":{"description":"Missing or invalid authentication token.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."},"examples":{"Example":{"title":"Example","value":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."}}},"exampleType":"examples"}},"exampleType":"examples"},"533921db-e89a-4668-beb7-019b07308107":{"description":"The token lacks the scope required for this resource.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"FORBIDDEN","message":"The token lacks the required scope."},"examples":{"Example":{"title":"Example","value":{"code":"FORBIDDEN","message":"The token lacks the required scope."}}},"exampleType":"examples"}},"exampleType":"examples"},"d7cb987a-5e3c-4241-ae84-e250630af0e3":{"description":"Rate limit exceeded. Retry after the interval in the Retry-After header.","headers":{"Retry-After":{"description":"Seconds to wait before retrying.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."},"examples":{"Example":{"title":"Example","value":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."}}},"exampleType":"examples"}},"exampleType":"examples"},"3d7fc8bc-5923-4d76-906c-7c6807deb94a":{"description":"An unexpected error occurred.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."},"examples":{"Example":{"title":"Example","value":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."}}},"exampleType":"examples"}},"exampleType":"examples"}},"security":{"7eebc22f-4ea3-4fe5-9436-4e71c422e305":{"oauth2":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"}}},"servers":{"7524c4d0-f52d-433a-b349-e1a06ce637b4":{"url":"https://devx.{environment}.oleria.io","description":"Oleria API server.","variables":{"environment":{"default":"prod","description":"Your Oleria deployment, for example `acme` for `https://devx.acme.oleria.io`. Substitute it in the OAuth scope names as well, since OpenAPI applies a server variable to the URL only and the scopes are published with the placeholder still in them."}}}},"schemas":{"75823a02-39de-498b-ac65-a3ae2aab2474":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"]},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}},"description":"Type for static conditional access expression values"}}}},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"]},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}}}]}},"description":"Typed condition value for static or dynamic values"}}},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionLangage":{"type":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"staticContentConditionLanguage":{"type":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"staticSearch":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"}},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"]}}},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"}},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"]}}},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"]},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"executionEngine":{"type":"string"},"scriptContent":{"type":"string"},"version":{"type":"string"}}}]},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"]}}}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"},"schema":{"title":"OAuth2 Auth","type":"string","isRequired":true,"description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"oauth2","name":"Authorization"}],"title":"oauth2"}]},"originalFileLocation":"developer-docs/api-reference/oleria-public-api-1.0.0.yaml"},"subdomain":"oleria","siteName":"Oleria Identity Security","title":"List - Oleria Identity Security","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-23T12:43:14.149Z","originalFileLocation":"api-reference/accounts/list.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"light\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Returns a page of accounts. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"List - Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:description\" content=\"Returns a page of accounts. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.oleria.com/api-reference/accounts/list\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Accounts\u0026amp;title=List\u0026amp;description=Returns+a+page+of+accounts.+Pass+%60pageToken%60+from+the+previous+response%27s+%60nextPageToken%60+to+fetch+the+next+page.+A+page+can+be+empty+while+the+results+are+stil\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=0fa2940786e3e790fc7f34e4586a21c128af647a7d7f43a7a4af05d0cd471ad2\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"List - Oleria Identity Security\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Returns a page of accounts. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Accounts\u0026amp;title=List\u0026amp;description=Returns+a+page+of+accounts.+Pass+%60pageToken%60+from+the+previous+response%27s+%60nextPageToken%60+to+fetch+the+next+page.+A+page+can+be+empty+while+the+results+are+stil\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=0fa2940786e3e790fc7f34e4586a21c128af647a7d7f43a7a4af05d0cd471ad2\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#027864\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.oleria.com/api-reference/accounts/list\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/accounts/list.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.oleria.com/#organization\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.oleria.com#website\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.oleria.com/api-reference/accounts/list#webpage\",\"url\":\"https://docs.oleria.com/api-reference/accounts/list\",\"name\":\"List\",\"description\":\"Returns a page of accounts. Pass pageToken from the previous response's nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\",\"dateModified\":\"2026-10-23T12:43:14.149Z\",\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.oleria.com/api-reference/accounts/list#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.oleria.com/api-reference/accounts/list#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inventory \u0026 Actions\",\"item\":\"https://docs.oleria.com/api-reference/access-assignments/list\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"List\",\"item\":\"https://docs.oleria.com/api-reference/accounts/list\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.oleria.com/api-reference/accounts/list#apireference\",\"headline\":\"List\",\"name\":\"List\",\"description\":\"Returns a page of accounts. Pass pageToken from the previous response's nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\",\"url\":\"https://docs.oleria.com/api-reference/accounts/list\",\"mainEntityOfPage\":{\"@id\":\"https://docs.oleria.com/api-reference/accounts/list#webpage\"},\"dateModified\":\"2026-10-23T12:43:14.149Z\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Oleria Identity Security\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Oleria Identity Security","nav":{"global":null,"tabs":[{"tab":"Product","pages":[{"title":"Product","href":"/introduction/overview"}]},{"tab":"Integrations","pages":[{"title":"Integrations","href":"/integrations/overview"}]},{"tab":"API Reference","groups":[{"group":"Getting Started","pages":[{"title":"API Overview","href":"/developer-docs/api-reference/overview"},{"title":"Generate an API Token","href":"/developer-docs/api-reference/generate-token"}]},{"group":"Inventory \u0026 Actions","pages":[{"group":"Access assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object","href":"/api-reference/access-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object/{id}","href":"/api-reference/access-assignments/get"}]},{"group":"Account roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles","href":"/api-reference/account-roles/list"},{"title":"Get","description":"Returns an account role by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles/{id}","href":"/api-reference/account-roles/get"}]},{"group":"Accounts","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts","href":"/api-reference/accounts/list"},{"title":"Get","description":"Returns an account by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts/{id}","href":"/api-reference/accounts/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts","href":"/api-reference/accounts/create"},{"title":"Activate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/activate","href":"/api-reference/accounts/activate"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/disable","href":"/api-reference/accounts/disable"},{"title":"Enable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/enable","href":"/api-reference/accounts/enable"},{"title":"Revoke active sessions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/revoke-sessions","href":"/api-reference/accounts/revoke-active-sessions"},{"title":"Remove access to shared resources","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}/resource-access","href":"/api-reference/accounts/remove-access-to-shared-resources"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}","href":"/api-reference/accounts/delete"}]},{"group":"Activities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities","href":"/api-reference/activities/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities/{id}","href":"/api-reference/activities/get"}]},{"group":"Assigned applications","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications","href":"/api-reference/assigned-applications/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications/{id}","href":"/api-reference/assigned-applications/get"},{"title":"Grant an account access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/grant-an-account-access"},{"title":"Remove an account's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/remove-an-accounts-access"},{"title":"Grant a group access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/grant-a-group-access"},{"title":"Remove a group's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/remove-a-groups-access"}]},{"group":"Authenticator enrollments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments","href":"/api-reference/authenticator-enrollments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments/{id}","href":"/api-reference/authenticator-enrollments/get"}]},{"group":"Authenticators","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators","href":"/api-reference/authenticators/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators/{id}","href":"/api-reference/authenticators/get"}]},{"group":"Department assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department","href":"/api-reference/department-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department/{id}","href":"/api-reference/department-assignments/get"}]},{"group":"Department hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department","href":"/api-reference/department-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department/{id}","href":"/api-reference/department-hierarchy/get"}]},{"group":"Departments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments","href":"/api-reference/departments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments/{id}","href":"/api-reference/departments/get"}]},{"group":"Employees","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees","href":"/api-reference/employees/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees/{id}","href":"/api-reference/employees/get"}]},{"group":"Enrollment links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator","href":"/api-reference/enrollment-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator/{id}","href":"/api-reference/enrollment-links/get"}]},{"group":"Impersonation grants","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity","href":"/api-reference/impersonation-grants/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity/{id}","href":"/api-reference/impersonation-grants/get"}]},{"group":"Integrated applications","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications","href":"/api-reference/integrated-applications/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications/{id}","href":"/api-reference/integrated-applications/get"}]},{"group":"Managed-via relationships","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object","href":"/api-reference/managed-via-relationships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object/{id}","href":"/api-reference/managed-via-relationships/get"}]},{"group":"Memberships","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity","href":"/api-reference/memberships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity/{id}","href":"/api-reference/memberships/get"}]},{"group":"Non-human identities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities","href":"/api-reference/non-human-identities/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities/{id}","href":"/api-reference/non-human-identities/get"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/non-human-identities/{id}/disable","href":"/api-reference/non-human-identities/disable"}]},{"group":"Object extensions","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension","href":"/api-reference/object-extensions/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension/{id}","href":"/api-reference/object-extensions/get"}]},{"group":"Person-employee links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee","href":"/api-reference/person-employee-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee/{id}","href":"/api-reference/person-employee-links/get"}]},{"group":"Persons","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons","href":"/api-reference/persons/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons/{id}","href":"/api-reference/persons/get"}]},{"group":"Reporting lines","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee","href":"/api-reference/reporting-lines/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee/{id}","href":"/api-reference/reporting-lines/get"}]},{"group":"Resource classes","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes","href":"/api-reference/resource-classes/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes/{id}","href":"/api-reference/resource-classes/get"}]},{"group":"Resource hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance","href":"/api-reference/resource-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance/{id}","href":"/api-reference/resource-hierarchy/get"}]},{"group":"Resource instances","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances","href":"/api-reference/resource-instances/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances/{id}","href":"/api-reference/resource-instances/get"},{"title":"Revoke anonymous access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/anonymous-access","href":"/api-reference/resource-instances/revoke-anonymous-access"},{"title":"Revoke external sharing","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/external-shares","href":"/api-reference/resource-instances/revoke-external-sharing"},{"title":"Remove an account's permissions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/permissions/{accountId}","href":"/api-reference/resource-instances/remove-an-accounts-permissions"}]},{"group":"Roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles","href":"/api-reference/roles/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles/{id}","href":"/api-reference/roles/get"},{"title":"Assign to an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/assign-to-an-account"},{"title":"Remove from an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/remove-from-an-account"}]},{"group":"User groups","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups","href":"/api-reference/user-groups/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups/{id}","href":"/api-reference/user-groups/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/user-groups","href":"/api-reference/user-groups/create"},{"title":"Add an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/add-an-account"},{"title":"Remove an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/remove-an-account"}]}]},{"group":"Action jobs","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs","href":"/api-reference/action-jobs/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}","href":"/api-reference/action-jobs/get"},{"title":"List results","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}/results","href":"/api-reference/action-jobs/list-results"},{"title":"Revert","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/action-jobs/{id}/revert","href":"/api-reference/action-jobs/revert"}]},{"group":"TrustFusion","pages":[{"group":"Query","pages":[{"title":"Validate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/validate","href":"/api-reference/query/validate"},{"title":"Execute","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/execute","href":"/api-reference/query/execute"},{"title":"Get a job","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/jobs/{job_id}","href":"/api-reference/query/get-a-job"}]},{"group":"Saved Query","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries","href":"/api-reference/saved-query/list"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/saved-queries","href":"/api-reference/saved-query/create"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/get"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml delete /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/delete"},{"title":"Update","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml patch /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/update"}]},{"group":"Schema","pages":[{"title":"List models","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models","href":"/api-reference/schema/list-models"},{"title":"Get a model","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models/{model_name}","href":"/api-reference/schema/get-a-model"}]}]},{"group":"Downloads","pages":[{"title":"Working with Downloads","href":"/developer-docs/api-reference/working-with-downloads"},{"group":"Downloads","pages":[{"title":"Create a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml post /v1/downloads","href":"/api-reference/downloads/create-a-download-request"},{"title":"Get a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml get /v1/downloads/{id}","href":"/api-reference/downloads/get-a-download-request"}]}]}]},{"tab":"What's New","pages":[{"title":"What's New","href":"/release-notes"}]}]},"basePath":"","title":"List - Oleria Identity Security","buildId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","deploymentId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C8RPHPxo.js","utils-0BK-9q6z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DfjzsUJT.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-B4v9psJ4.js","snippetPresets-CpTQv-Ez.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-BNP-Fvr0.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BSgu6h1D.js","shallow-Biv1i9Gs.js","getApiPlaygroundDisplay-BoGOXhtF.js","CodeSnippet-DvQoT18_.js","CodeSnippets-Dnpa15xT.js","Page-Buji1S4J.js","getPastedJson-xAIyhUFE.js","icon-S6FBih11.js","MethodPill-SaYeUZyk.js","DuplicateIcon-Cs-p3v2Q.js","createIcon-DjCFEoHq.js","DynamicMarkdown-BcnBltEQ.js","SectionHeading-BUBl0eEF.js","axios-vUo_bRtp.js","Markdown-h4cOoD8d.js","clsx-B2v50t8t.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-DJnKvr0g.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BHrrjR1K.js"]}