Returns a page of assigned applications. Pass pageToken from the previous response’s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.
Opaque page token from the previous response's nextPageToken. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.
Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.
Opaque token for the next page; pass it back as pageToken. Present whenever more pages remain, including when this page is empty because the results are still being prepared, and absent only once the collection is fully returned. Do not parse or construct it.
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Oleria Identity Security","colors":{"primary":"#027864","light":"#027864","dark":"#58D5BA"},"logo":{"light":"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d","dark":"https://mintcdn.com/oleria/9Xgkiz4uBKa5_MIM/images/Oleria_Dark_2.png?fit=max\u0026auto=format\u0026n=9Xgkiz4uBKa5_MIM\u0026q=85\u0026s=eed2ceca9aaaa1597123d7edabce3ce2"},"favicon":"https://mintcdn.com/oleria/rpFX8xIzvg2xF0B0/images/favicon.png?fit=max\u0026auto=format\u0026n=rpFX8xIzvg2xF0B0\u0026q=85\u0026s=b2b79fcf5eaf05bffa7866fe11571fd9","appearance":{"default":"light"},"background":{"color":{"light":"#ffffff"}},"navbar":{"links":[{"href":"mailto:support@oleria.com","label":"Support"}]},"footer":{"socials":{"website":"https://oleria.com"}},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"oleria","hasAudioNarration":false,"actualSubdomain":"oleria","customDomains":["docs.oleria.com"],"gitSource":{"type":"github","owner":"roanokedatasecurity","repo":"oleria-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aeace4bfeac5b4749625236","collectionId":"2edfd769-349b-438c-87bc-d9700635ec79","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aeace4bfeac5b4749625236"},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6aead2ddcd71ec77215afae7","clientVersion":"0.0.4054","searchFilterCounts":[{"language":"default","tag":"Integrations","count":370},{"language":"default","tag":"Applications","count":312},{"language":"default","tag":"API Reference","count":91},{"language":"default","tag":"Inventory \u0026 Actions","count":72},{"language":"default","tag":"Product","count":69},{"language":"default","tag":"Security and compliance","count":52},{"language":"default","tag":"Developer tools","count":48},{"language":"default","tag":"Collaboration and productivity","count":39},{"language":"default","tag":"Data and analytics","count":34},{"language":"default","tag":"Finance and operations","count":29}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true,"deflection":{"enabled":true,"email":"support@oleria.com","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/assigned-applications/list","slug":"/api-reference/assigned-applications/list","pageMetadata":{"title":"List","description":"Returns a page of assigned applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications","href":"/api-reference/assigned-applications/list","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_components.p, {\n children: [\"Returns a page of assigned applications. Pass \", _jsx(_components.code, {\n children: \"pageToken\"\n }), \" from the previous response’s \", _jsx(_components.code, {\n children: \"nextPageToken\"\n }), \" to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no \", _jsx(_components.code, {\n children: \"nextPageToken\"\n }), \". Requires the \", _jsx(_components.code, {\n children: \"https://devx.{environment}.oleria.io/read\"\n }), \" scope.\"]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"List","description":"Returns a page of assigned applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications","href":"/api-reference/assigned-applications/list","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"summary":"List","description":"Returns a page of assigned applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","operationId":"ListAssignedApplications","tags":["Assigned applications"],"parameters":["ad62a822-dcbd-4e5a-ab26-78a699c7981e","6f7c6d14-1a10-4305-b928-9efc0d12b422","4c285de5-753c-45a6-8859-bbf04d6bd39b"],"security":["e624d606-1620-439d-86a3-3269822358ab"],"responses":{"200":"23ffe734-cdfc-49e9-83a5-1982970e5f7d","400":"e090f89c-3c35-4a8f-861e-d4796041b134","401":"0d58712b-ef1f-4d4f-b712-43e851ad97bd","403":"04b9ccc4-15b9-4e09-b440-62b741ec5d5d","429":"53acd63f-abc7-4caf-b4be-ad57f195df8c","500":"f987e24d-c7dd-4b3a-ba9f-29844cb175db"},"method":"get","type":"path","servers":["7524c4d0-f52d-433a-b349-e1a06ce637b4"],"path":"/v1/assigned-applications","baseUrlOptions":["https://devx.{environment}.oleria.io"],"title":"List","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"ad62a822-dcbd-4e5a-ab26-78a699c7981e":{"name":"pageSize","in":"query","description":"Maximum items per page.","schema":{"type":"integer","format":"int32","default":50,"minimum":1,"maximum":200,"description":"Maximum items per page.","uniqueKey":"","typeLabel":"integer\u003cint32>"}},"6f7c6d14-1a10-4305-b928-9efc0d12b422":{"name":"pageToken","in":"query","description":"Opaque page token from the previous response's `nextPageToken`. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.","schema":{"type":"string","description":"Opaque page token from the previous response's `nextPageToken`. Omit it for the first page; pass it back exactly as received. Do not parse or construct it.","uniqueKey":"","typeLabel":"string"}},"4c285de5-753c-45a6-8859-bbf04d6bd39b":{"name":"applicationInstanceId","in":"query","description":"Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.","schema":{"type":"string","format":"uuid","description":"Scope the list to a single application instance, identified by its id (UUID). An application instance is one connected integration in your tenant: a specific Okta, Workday, and so on. Omit it to list across all of your instances.","uniqueKey":"","typeLabel":"string\u003cuuid>"}}},"responses":{"23ffe734-cdfc-49e9-83a5-1982970e5f7d":{"description":"A page of assigned applications.","content":{"application/json":{"schema":{"type":"object","required":["items"],"properties":{"items":{"type":"array","items":{"type":"object","description":"An Oleria AssignedApplication represents an IDP's knowledge of an application —\nemitted by Okta, Entra, PingOne, and similar identity providers.\nMultiple Oleria AssignedApplication nodes may exist for the same deployment, one per IDP.\nEach connects to the same Oleria ApplicationDeployment via Oleria ApplicationReferencedBy.\nThe deployment node is the merge point for conflicting signals across IDPs.\nenrichedSamlEntityId and enrichedOAuthClientId carry plain-text auth identity signals\nsourced from the IDP's SSO configuration.\n","required":["oleriaObjectMetadata","globalId","id","name","objectMetadata"],"properties":{"id":{"type":"string","description":"An identifier for an [AssignedApplication](#/components/schemas/AssignedApplication) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations.\n","example":"0oa1qcscnzkl4DTym1d8 (Okta)","isRequired":true,"uniqueKey":"\\items.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","description":"The name of the assigned application","example":"GitHub Enterprise Cloud","isRequired":true,"uniqueKey":"\\items.items.[INDEX].name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"\\items.items.[INDEX].objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"\\items.items.[INDEX].objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectMetadata","typeLabel":"object"},"globalId":{"type":"string","description":"Opaque platform-assigned identifier for this assigned application node.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalId","typeLabel":"string"},"oleriaObjectMetadata":{"type":"object","properties":{"enrichmentVersion":{"type":"string","uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata.enrichmentVersion","typeLabel":"string"},"generatedTime":{"type":"string","format":"date-time","uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata.generatedTime","typeLabel":"string\u003cdate-time>"}},"description":"object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].oleriaObjectMetadata","typeLabel":"object"},"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","uniqueKey":"\\items.items.[INDEX].authenticationRequirements","typeLabel":"object"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].labels","typeLabel":"object[]"},"objectDirectoryContainerFederation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerFederation","typeLabel":"object"},"objectDirectoryContainerId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ObjectDirectory](#/components/schemas/ObjectDirectory) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].objectDirectoryContainerId","typeLabel":"string"},"oauthClientId":{"type":"string","description":"Plain-text OAuth client ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.","example":"1234567890abcdef.apps.googleusercontent.com","uniqueKey":"\\items.items.[INDEX].oauthClientId","typeLabel":"string"},"samlEntityId":{"type":"string","description":"Plain-text SAML service provider entity ID for this application instance. Informational — authenticationRequirements.authenticationKeys carries the authoritative hashed representation used for matching. Emitted alongside the hashed representation to support display and diagnostics.","example":"https://github.com/enterprises/acme-corp","uniqueKey":"\\items.items.[INDEX].samlEntityId","typeLabel":"string"},"vendorName":{"type":"string","description":"Name of the vendor for the enterprise application or identity provider product","example":"Microsoft","uniqueKey":"\\items.items.[INDEX].vendorName","typeLabel":"string"},"globalAuthenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","uniqueKey":"\\items.items.[INDEX].globalAuthenticationRequirements","typeLabel":"object"},"globalObjectDirectoryContainerId":{"type":"string","description":"Global ID of the ObjectDirectory (IDP) that emitted this assignment.","uniqueKey":"\\items.items.[INDEX].globalObjectDirectoryContainerId","typeLabel":"string"},"enrichedOAuthClientId":{"type":"string","description":"Plain-text OAuth client ID from the IDP configuration. Key resolution signal\n(resolution priority 4). Promoted to Oleria ApplicationDeployment.enrichedOAuthClientId.\n","uniqueKey":"\\items.items.[INDEX].enrichedOAuthClientId","typeLabel":"string"},"enrichedResolvedDeploymentId":{"type":"string","description":"Global ID of the Oleria ApplicationDeployment this node resolved to. Denormalized cache of the\nOleria ApplicationReferencedBy edge, which is authoritative. Omitted when unresolved — surfaces\nin admin UX for review.\n","uniqueKey":"\\items.items.[INDEX].enrichedResolvedDeploymentId","typeLabel":"string"},"enrichedSamlEntityId":{"type":"string","description":"Plain-text SAML entity ID from the IDP SSO configuration. Key resolution signal\n(resolution priority 3). Promoted to Oleria ApplicationDeployment.enrichedSamlEntityId\nfrom the most authoritative source.\n","uniqueKey":"\\items.items.[INDEX].enrichedSamlEntityId","typeLabel":"string"}},"uniqueKey":"\\items.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"\\items","typeLabel":"object[]"},"nextPageToken":{"type":"string","description":"Opaque token for the next page; pass it back as `pageToken`. Present whenever more pages remain, including when this page is empty because the results are still being prepared, and absent only once the collection is fully returned. Do not parse or construct it.","uniqueKey":"nextPageToken","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"items":[{"id":"0oa1qcscnzkl4DTym1d8 (Okta)","name":"GitHub Enterprise Cloud","objectMetadata":{"ApplicationInstanceId":"\u003cstring>","GeneratedTime":"2023-11-07T05:31:56Z","Profile":"Account","ObjectOrRelationshipType":"\u003cstring>"},"globalId":"\u003cstring>","oleriaObjectMetadata":{"enrichmentVersion":"\u003cstring>","generatedTime":"2023-11-07T05:31:56Z"},"authenticationRequirements":{"isMFAAuthority":true,"isSSOBasedMFARequired":false,"authenticationKeys":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"adaptiveAuthenticationMethodSelectionPolicy":[{"policy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"riskLevel":"Critical"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"availableAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"enforcedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"passwordPolicy":{"expirationLengthInDays":123,"length":123,"reuseDisallowed":true,"resetViaSelfServiceAllowed":true,"characters":["AlphaUppercase"],"mfaRequirements":"Required","policyMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"secondaryFactorRequirements":"Required","ssoExclusions":["user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)"]},"labels":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"objectDirectoryContainerFederation":{"isFederated":true,"authenticationKey":"\u003cstring>"},"objectDirectoryContainerId":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","oauthClientId":"1234567890abcdef.apps.googleusercontent.com","samlEntityId":"https://github.com/enterprises/acme-corp","vendorName":"Microsoft","globalAuthenticationRequirements":{"isMFAAuthority":true,"isSSOBasedMFARequired":false,"authenticationKeys":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"adaptiveAuthenticationMethodSelectionPolicy":[{"policy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"riskLevel":"Critical"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"availableAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"enforcedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"passwordPolicy":{"expirationLengthInDays":123,"length":123,"reuseDisallowed":true,"resetViaSelfServiceAllowed":true,"characters":["AlphaUppercase"],"mfaRequirements":"Required","policyMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"secondaryFactorRequirements":"Required","ssoExclusions":["user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)"]},"globalObjectDirectoryContainerId":"\u003cstring>","enrichedOAuthClientId":"\u003cstring>","enrichedResolvedDeploymentId":"\u003cstring>","enrichedSamlEntityId":"\u003cstring>"}],"nextPageToken":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"},"e090f89c-3c35-4a8f-861e-d4796041b134":{"description":"The request was malformed, for example an invalid cursor or page size.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"BAD_REQUEST","message":"The request was malformed."},"examples":{"Example":{"title":"Example","value":{"code":"BAD_REQUEST","message":"The request was malformed."}}},"exampleType":"examples"}},"exampleType":"examples"},"0d58712b-ef1f-4d4f-b712-43e851ad97bd":{"description":"Missing or invalid authentication token.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."},"examples":{"Example":{"title":"Example","value":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."}}},"exampleType":"examples"}},"exampleType":"examples"},"04b9ccc4-15b9-4e09-b440-62b741ec5d5d":{"description":"The token lacks the scope required for this resource.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"FORBIDDEN","message":"The token lacks the required scope."},"examples":{"Example":{"title":"Example","value":{"code":"FORBIDDEN","message":"The token lacks the required scope."}}},"exampleType":"examples"}},"exampleType":"examples"},"53acd63f-abc7-4caf-b4be-ad57f195df8c":{"description":"Rate limit exceeded. Retry after the interval in the Retry-After header.","headers":{"Retry-After":{"description":"Seconds to wait before retrying.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."},"examples":{"Example":{"title":"Example","value":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."}}},"exampleType":"examples"}},"exampleType":"examples"},"f987e24d-c7dd-4b3a-ba9f-29844cb175db":{"description":"An unexpected error occurred.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."},"examples":{"Example":{"title":"Example","value":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."}}},"exampleType":"examples"}},"exampleType":"examples"}},"security":{"e624d606-1620-439d-86a3-3269822358ab":{"oauth2":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"}}},"servers":{"7524c4d0-f52d-433a-b349-e1a06ce637b4":{"url":"https://devx.{environment}.oleria.io","description":"Oleria API server.","variables":{"environment":{"default":"prod","description":"Your Oleria deployment, for example `acme` for `https://devx.acme.oleria.io`. Substitute it in the OAuth scope names as well, since OpenAPI applies a server variable to the URL only and the scopes are published with the placeholder still in them."}}}},"schemas":{"75823a02-39de-498b-ac65-a3ae2aab2474":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"]},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}},"description":"Type for static conditional access expression values"}}}},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"]},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}}}]}},"description":"Typed condition value for static or dynamic values"}}},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionLangage":{"type":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"staticContentConditionLanguage":{"type":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"staticSearch":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"}},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"]}}},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"}},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"]}}},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"]},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"executionEngine":{"type":"string"},"scriptContent":{"type":"string"},"version":{"type":"string"}}}]},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"]}}}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"},"schema":{"title":"OAuth2 Auth","type":"string","isRequired":true,"description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"oauth2","name":"Authorization"}],"title":"oauth2"}]},"originalFileLocation":"developer-docs/api-reference/oleria-public-api-1.0.0.yaml"},"subdomain":"oleria","siteName":"Oleria Identity Security","title":"List - Oleria Identity Security","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-23T12:43:14.243Z","originalFileLocation":"api-reference/assigned-applications/list.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"light\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Returns a page of assigned applications. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"List - Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:description\" content=\"Returns a page of assigned applications. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.oleria.com/api-reference/assigned-applications/list\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Assigned+applications\u0026amp;title=List\u0026amp;description=Returns+a+page+of+assigned+applications.+Pass+%60pageToken%60+from+the+previous+response%27s+%60nextPageToken%60+to+fetch+the+next+page.+A+page+can+be+empty+while+the+res\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=cfab6fee98cf6b893c391400992bc232b045dea99a27758d9ef607283bef42db\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"List - Oleria Identity Security\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Returns a page of assigned applications. Pass pageToken from the previous response\u0026#x27;s nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Assigned+applications\u0026amp;title=List\u0026amp;description=Returns+a+page+of+assigned+applications.+Pass+%60pageToken%60+from+the+previous+response%27s+%60nextPageToken%60+to+fetch+the+next+page.+A+page+can+be+empty+while+the+res\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=cfab6fee98cf6b893c391400992bc232b045dea99a27758d9ef607283bef42db\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#027864\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.oleria.com/api-reference/assigned-applications/list\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/assigned-applications/list.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.oleria.com/#organization\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.oleria.com#website\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.oleria.com/api-reference/assigned-applications/list#webpage\",\"url\":\"https://docs.oleria.com/api-reference/assigned-applications/list\",\"name\":\"List\",\"description\":\"Returns a page of assigned applications. Pass pageToken from the previous response's nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\",\"dateModified\":\"2026-10-23T12:43:14.243Z\",\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.oleria.com/api-reference/assigned-applications/list#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.oleria.com/api-reference/assigned-applications/list#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inventory \u0026 Actions\",\"item\":\"https://docs.oleria.com/api-reference/access-assignments/list\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"List\",\"item\":\"https://docs.oleria.com/api-reference/assigned-applications/list\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.oleria.com/api-reference/assigned-applications/list#apireference\",\"headline\":\"List\",\"name\":\"List\",\"description\":\"Returns a page of assigned applications. Pass pageToken from the previous response's nextPageToken to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no nextPageToken. Requires the https://devx.{environment}.oleria.io/read scope.\",\"url\":\"https://docs.oleria.com/api-reference/assigned-applications/list\",\"mainEntityOfPage\":{\"@id\":\"https://docs.oleria.com/api-reference/assigned-applications/list#webpage\"},\"dateModified\":\"2026-10-23T12:43:14.243Z\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Oleria Identity Security\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Oleria Identity Security","nav":{"global":null,"tabs":[{"tab":"Product","pages":[{"title":"Product","href":"/introduction/overview"}]},{"tab":"Integrations","pages":[{"title":"Integrations","href":"/integrations/overview"}]},{"tab":"API Reference","groups":[{"group":"Getting Started","pages":[{"title":"API Overview","href":"/developer-docs/api-reference/overview"},{"title":"Generate an API Token","href":"/developer-docs/api-reference/generate-token"}]},{"group":"Inventory \u0026 Actions","pages":[{"group":"Access assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object","href":"/api-reference/access-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object/{id}","href":"/api-reference/access-assignments/get"}]},{"group":"Account roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles","href":"/api-reference/account-roles/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles/{id}","href":"/api-reference/account-roles/get"}]},{"group":"Accounts","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts","href":"/api-reference/accounts/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts/{id}","href":"/api-reference/accounts/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts","href":"/api-reference/accounts/create"},{"title":"Activate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/activate","href":"/api-reference/accounts/activate"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/disable","href":"/api-reference/accounts/disable"},{"title":"Enable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/enable","href":"/api-reference/accounts/enable"},{"title":"Revoke active sessions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/revoke-sessions","href":"/api-reference/accounts/revoke-active-sessions"},{"title":"Remove access to shared resources","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}/resource-access","href":"/api-reference/accounts/remove-access-to-shared-resources"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}","href":"/api-reference/accounts/delete"}]},{"group":"Activities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities","href":"/api-reference/activities/list"},{"title":"Get","description":"Returns an activity by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities/{id}","href":"/api-reference/activities/get"}]},{"group":"Assigned applications","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications","href":"/api-reference/assigned-applications/list"},{"title":"Get","description":"Returns an assigned application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications/{id}","href":"/api-reference/assigned-applications/get"},{"title":"Grant an account access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/grant-an-account-access"},{"title":"Remove an account's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/remove-an-accounts-access"},{"title":"Grant a group access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/grant-a-group-access"},{"title":"Remove a group's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/remove-a-groups-access"}]},{"group":"Authenticator enrollments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments","href":"/api-reference/authenticator-enrollments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments/{id}","href":"/api-reference/authenticator-enrollments/get"}]},{"group":"Authenticators","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators","href":"/api-reference/authenticators/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators/{id}","href":"/api-reference/authenticators/get"}]},{"group":"Department assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department","href":"/api-reference/department-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department/{id}","href":"/api-reference/department-assignments/get"}]},{"group":"Department hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department","href":"/api-reference/department-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department/{id}","href":"/api-reference/department-hierarchy/get"}]},{"group":"Departments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments","href":"/api-reference/departments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments/{id}","href":"/api-reference/departments/get"}]},{"group":"Employees","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees","href":"/api-reference/employees/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees/{id}","href":"/api-reference/employees/get"}]},{"group":"Enrollment links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator","href":"/api-reference/enrollment-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator/{id}","href":"/api-reference/enrollment-links/get"}]},{"group":"Impersonation grants","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity","href":"/api-reference/impersonation-grants/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity/{id}","href":"/api-reference/impersonation-grants/get"}]},{"group":"Integrated applications","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications","href":"/api-reference/integrated-applications/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications/{id}","href":"/api-reference/integrated-applications/get"}]},{"group":"Managed-via relationships","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object","href":"/api-reference/managed-via-relationships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object/{id}","href":"/api-reference/managed-via-relationships/get"}]},{"group":"Memberships","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity","href":"/api-reference/memberships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity/{id}","href":"/api-reference/memberships/get"}]},{"group":"Non-human identities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities","href":"/api-reference/non-human-identities/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities/{id}","href":"/api-reference/non-human-identities/get"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/non-human-identities/{id}/disable","href":"/api-reference/non-human-identities/disable"}]},{"group":"Object extensions","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension","href":"/api-reference/object-extensions/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension/{id}","href":"/api-reference/object-extensions/get"}]},{"group":"Person-employee links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee","href":"/api-reference/person-employee-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee/{id}","href":"/api-reference/person-employee-links/get"}]},{"group":"Persons","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons","href":"/api-reference/persons/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons/{id}","href":"/api-reference/persons/get"}]},{"group":"Reporting lines","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee","href":"/api-reference/reporting-lines/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee/{id}","href":"/api-reference/reporting-lines/get"}]},{"group":"Resource classes","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes","href":"/api-reference/resource-classes/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes/{id}","href":"/api-reference/resource-classes/get"}]},{"group":"Resource hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance","href":"/api-reference/resource-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance/{id}","href":"/api-reference/resource-hierarchy/get"}]},{"group":"Resource instances","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances","href":"/api-reference/resource-instances/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances/{id}","href":"/api-reference/resource-instances/get"},{"title":"Revoke anonymous access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/anonymous-access","href":"/api-reference/resource-instances/revoke-anonymous-access"},{"title":"Revoke external sharing","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/external-shares","href":"/api-reference/resource-instances/revoke-external-sharing"},{"title":"Remove an account's permissions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/permissions/{accountId}","href":"/api-reference/resource-instances/remove-an-accounts-permissions"}]},{"group":"Roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles","href":"/api-reference/roles/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles/{id}","href":"/api-reference/roles/get"},{"title":"Assign to an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/assign-to-an-account"},{"title":"Remove from an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/remove-from-an-account"}]},{"group":"User groups","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups","href":"/api-reference/user-groups/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups/{id}","href":"/api-reference/user-groups/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/user-groups","href":"/api-reference/user-groups/create"},{"title":"Add an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/add-an-account"},{"title":"Remove an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/remove-an-account"}]}]},{"group":"Action jobs","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs","href":"/api-reference/action-jobs/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}","href":"/api-reference/action-jobs/get"},{"title":"List results","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}/results","href":"/api-reference/action-jobs/list-results"},{"title":"Revert","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/action-jobs/{id}/revert","href":"/api-reference/action-jobs/revert"}]},{"group":"TrustFusion","pages":[{"group":"Query","pages":[{"title":"Validate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/validate","href":"/api-reference/query/validate"},{"title":"Execute","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/execute","href":"/api-reference/query/execute"},{"title":"Get a job","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/jobs/{job_id}","href":"/api-reference/query/get-a-job"}]},{"group":"Saved Query","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries","href":"/api-reference/saved-query/list"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/saved-queries","href":"/api-reference/saved-query/create"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/get"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml delete /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/delete"},{"title":"Update","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml patch /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/update"}]},{"group":"Schema","pages":[{"title":"List models","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models","href":"/api-reference/schema/list-models"},{"title":"Get a model","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models/{model_name}","href":"/api-reference/schema/get-a-model"}]}]},{"group":"Downloads","pages":[{"title":"Working with Downloads","href":"/developer-docs/api-reference/working-with-downloads"},{"group":"Downloads","pages":[{"title":"Create a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml post /v1/downloads","href":"/api-reference/downloads/create-a-download-request"},{"title":"Get a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml get /v1/downloads/{id}","href":"/api-reference/downloads/get-a-download-request"}]}]}]},{"tab":"What's New","pages":[{"title":"What's New","href":"/release-notes"}]}]},"basePath":"","title":"List - Oleria Identity Security","buildId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","deploymentId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C8RPHPxo.js","utils-0BK-9q6z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DfjzsUJT.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-B4v9psJ4.js","snippetPresets-CpTQv-Ez.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-BNP-Fvr0.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BSgu6h1D.js","shallow-Biv1i9Gs.js","getApiPlaygroundDisplay-BoGOXhtF.js","CodeSnippet-DvQoT18_.js","CodeSnippets-Dnpa15xT.js","Page-Buji1S4J.js","getPastedJson-xAIyhUFE.js","icon-S6FBih11.js","MethodPill-SaYeUZyk.js","DuplicateIcon-Cs-p3v2Q.js","createIcon-DjCFEoHq.js","DynamicMarkdown-BcnBltEQ.js","SectionHeading-BUBl0eEF.js","axios-vUo_bRtp.js","Markdown-h4cOoD8d.js","clsx-B2v50t8t.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-DJnKvr0g.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BHrrjR1K.js"]}