An Oleria IntegratedApplication represents a direct Oleria integration — the application's own
AIR source application emits this object. It is the most authoritative source for deployment identity signals,
including the Oleria-assigned globalDeploymentKey (translated from IntegratedApplication.key).
Multiple Oleria IntegratedApplication nodes may exist for the same deployment in rare cases
(e.g. multi-region integrations), but typically there is one per customer deployment.
Connects to Oleria ApplicationDeployment via Oleria ApplicationReferencedBy.
AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object
An identifier for an IntegratedApplication object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations. For the IntegratedApplication object this can be based on the key field
The unique application-specific key that maps to a specific service instance integrated with Oleria. This key is used to prevent instance collision when adding integrations to the system
The name of application-specific service instance that has been integrated with Oleria e.g. GitHub organization, Salesforce instance, Google Workspace domain, Microsoft 365 tenant, etc. This is typically the unit of registration within the application of a customer's organization or enterprise and is associated with an IntegratedApplicationKey.
The ObjectMetadata structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data
AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object
Translated from IntegratedApplication.key. Oleria-assigned stable deployment identifier.
Used as the primary key for deployment resolution (resolution priority 1).
An array of relationship types supported for federated connections e.g. EntityAssignedAccessToObject or IdentityAccountMemberOfUserGroup. If federated connections are supported, then Oleria will use data in the edges emitted by the source application to do composite graph connections for the relevant source entities
The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a "GraphNotation:" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.
Declares object and relationship types that this integration does not support despite its declared schema profile. Omitted when the integration fully satisfies its declared profile contract. See UnsupportedTypeSet for semantics.
Global ID of the Oleria ApplicationDeployment this node resolved to. Denormalized cache of the
Oleria ApplicationReferencedBy edge, which is authoritative; set by the deployment resolution
pipeline after matching.
Was this page helpful?
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Oleria Identity Security","colors":{"primary":"#027864","light":"#027864","dark":"#58D5BA"},"logo":{"light":"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d","dark":"https://mintcdn.com/oleria/9Xgkiz4uBKa5_MIM/images/Oleria_Dark_2.png?fit=max\u0026auto=format\u0026n=9Xgkiz4uBKa5_MIM\u0026q=85\u0026s=eed2ceca9aaaa1597123d7edabce3ce2"},"favicon":"https://mintcdn.com/oleria/rpFX8xIzvg2xF0B0/images/favicon.png?fit=max\u0026auto=format\u0026n=rpFX8xIzvg2xF0B0\u0026q=85\u0026s=b2b79fcf5eaf05bffa7866fe11571fd9","appearance":{"default":"light"},"background":{"color":{"light":"#ffffff"}},"navbar":{"links":[{"href":"mailto:support@oleria.com","label":"Support"}]},"footer":{"socials":{"website":"https://oleria.com"}},"styling":{"latex":false},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"oleria","hasAudioNarration":false,"actualSubdomain":"oleria","customDomains":["docs.oleria.com"],"gitSource":{"type":"github","owner":"roanokedatasecurity","repo":"oleria-docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6aeace4bfeac5b4749625236","collectionId":"2edfd769-349b-438c-87bc-d9700635ec79","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6aeace4bfeac5b4749625236"},"feedback":{"thumbs":true},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6aead2ddcd71ec77215afae7","clientVersion":"0.0.4054","searchFilterCounts":[{"language":"default","tag":"Integrations","count":370},{"language":"default","tag":"Applications","count":312},{"language":"default","tag":"API Reference","count":91},{"language":"default","tag":"Inventory \u0026 Actions","count":72},{"language":"default","tag":"Product","count":69},{"language":"default","tag":"Security and compliance","count":52},{"language":"default","tag":"Developer tools","count":48},{"language":"default","tag":"Collaboration and productivity","count":39},{"language":"default","tag":"Data and analytics","count":34},{"language":"default","tag":"Finance and operations","count":29}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableAskAiSearchBar":true,"deflection":{"enabled":true,"email":"support@oleria.com","showHelpButton":true}},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"byok-sep-25","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"vite-origin","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-updated-9-15","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[],"page":{"pagePath":"api-reference/integrated-applications/get","slug":"/api-reference/integrated-applications/get","pageMetadata":{"title":"Get","description":"Returns an integrated application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications/{id}","href":"/api-reference/integrated-applications/get","autogeneratedByOpenApi":true},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_components.p, {\n children: [\"Returns an integrated application by its global id. Requires the \", _jsx(_components.code, {\n children: \"https://devx.{environment}.oleria.io/read\"\n }), \" scope.\"]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"config":{},"pageMetadata":{"title":"Get","description":"Returns an integrated application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications/{id}","href":"/api-reference/integrated-applications/get","autogeneratedByOpenApi":true}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":[],"openApiReferenceData":{"operation":{"summary":"Get","description":"Returns an integrated application by its global id. Requires the `https://devx.{environment}.oleria.io/read` scope.","operationId":"GetIntegratedApplication","tags":["Integrated applications"],"parameters":["2148bdb9-63d6-4b2e-b569-65cbc58162db"],"security":["08a115fa-40db-4379-b00c-70852704c94c"],"responses":{"200":"579693f3-b2fb-4790-b904-f7cdcd30f747","400":"41589d47-92b8-4f44-9dac-f4a8ab857855","401":"9ea3a2fa-c2d5-4f01-9515-972be43dd924","403":"cda17f5b-453a-4fbd-ac35-d14c767973fa","404":"f2a8e368-9e5a-474d-9c5c-3bc596d92130","429":"ede43fec-8b51-4f27-8c21-6019d5889d27","500":"427ae571-e70c-43d2-9e5f-a05a7d7446dc"},"method":"get","type":"path","servers":["7524c4d0-f52d-433a-b349-e1a06ce637b4"],"path":"/v1/integrated-applications/{id}","baseUrlOptions":["https://devx.{environment}.oleria.io"],"title":"Get","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"2148bdb9-63d6-4b2e-b569-65cbc58162db":{"name":"id","in":"path","description":"Global id of the integrated application.","required":true,"schema":{"type":"string","isRequired":true,"description":"Global id of the integrated application.","uniqueKey":"","typeLabel":"string"}}},"responses":{"579693f3-b2fb-4790-b904-f7cdcd30f747":{"description":"The integrated application.","content":{"application/json":{"schema":{"type":"object","description":"An Oleria IntegratedApplication represents a direct Oleria integration — the application's own\nAIR source application emits this object. It is the most authoritative source for deployment identity signals,\nincluding the Oleria-assigned globalDeploymentKey (translated from IntegratedApplication.key).\nMultiple Oleria IntegratedApplication nodes may exist for the same deployment in rare cases\n(e.g. multi-region integrations), but typically there is one per customer deployment.\nConnects to Oleria ApplicationDeployment via Oleria ApplicationReferencedBy.\n","required":["oleriaObjectMetadata","globalAuthenticationRequirements","globalDeploymentKey","globalId","authenticationRequirements","category","id","key","name","objectMetadata"],"properties":{"authenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"authenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"authenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"authenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"authenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"authenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"authenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"authenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"authenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"authenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"authenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"authenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"authenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"authenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"authenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"authenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"authenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","isRequired":true,"uniqueKey":"authenticationRequirements","typeLabel":"object"},"category":{"type":"string","description":"Categories of application that can be integrated with Oleria\n","enum":["BusinessApplication","CloudDataService","CloudInfrastructure","Collaboration","Communications","CRM","CustomApplication","DeveloperTool","DirectoryService","Finance","HRIS","IdentityProvider","ITSM","LogAnalytics","Productivity","Security","Storage"],"isRequired":true,"uniqueKey":"category","typeLabel":"enum\u003cstring>"},"id":{"type":"string","description":"An identifier for an [IntegratedApplication](#/components/schemas/IntegratedApplication) object in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application id so connections to the object are robust to metadata changes and other relevant operations. For the IntegratedApplication object this can be based on the key field\n","example":"app:O_kgDOCfJllg (GitHub)","isRequired":true,"uniqueKey":"id","typeLabel":"string"},"key":{"type":"string","description":"The unique application-specific key that maps to a specific service instance integrated with Oleria. This key is used to prevent instance collision when adding integrations to the system","example":"O_kgDOCfJllg (GitHub)","isRequired":true,"uniqueKey":"key","typeLabel":"string"},"name":{"minLength":1,"type":"string","description":"The name of application-specific service instance that has been integrated with Oleria e.g. GitHub organization, Salesforce instance, Google Workspace domain, Microsoft 365 tenant, etc. This is typically the unit of registration within the application of a customer's organization or enterprise and is associated with an IntegratedApplicationKey.","example":"roanokedatasecurity","isRequired":true,"uniqueKey":"name","typeLabel":"string"},"objectMetadata":{"required":["ApplicationInstanceId","GeneratedTime"],"type":"object","properties":{"ApplicationInstanceId":{"type":"string","isRequired":true,"uniqueKey":"objectMetadata.ApplicationInstanceId","typeLabel":"string"},"GeneratedTime":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"objectMetadata.GeneratedTime","typeLabel":"string\u003cdate-time>"},"Profile":{"type":"string","enum":["Account","Membership","Governance","Risk","Access","Detection"],"uniqueKey":"objectMetadata.Profile","typeLabel":"enum\u003cstring>"},"ObjectOrRelationshipType":{"type":"string","uniqueKey":"objectMetadata.ObjectOrRelationshipType","typeLabel":"string"}},"description":"The _ObjectMetadata_ structure defines metadata that applies to every object and relationship, and is usually managed by the system that receives the data\n","isRequired":true,"uniqueKey":"objectMetadata","typeLabel":"object"},"globalAuthenticationRequirements":{"type":"object","required":["isMFAAuthority","isSSOBasedMFARequired"],"properties":{"isMFAAuthority":{"type":"boolean","description":"Is this the MFA authority for authentication associated with this application. If false, then a connected identity provider is usually the MFA authority","example":true,"isRequired":true,"uniqueKey":"globalAuthenticationRequirements.isMFAAuthority","typeLabel":"boolean"},"isSSOBasedMFARequired":{"type":"boolean","description":"Does that application require MFA to be done at the configured IDP to allow login","example":false,"isRequired":true,"uniqueKey":"globalAuthenticationRequirements.isSSOBasedMFARequired","typeLabel":"boolean"},"authenticationKeys":{"type":"array","description":"Each array item is a base64 encoded SHA256 hash of authentication configuration properties.The authenticationKeys property is used by Oleria to match enterprise application IntegratedApplication objects with corresponding identity provider configured AssignedApplication objects assigned to accounts or groups. When these objects are connected and there's a match in authenticationKeys and federated identity, the Oleria platform will connect [Account](#/components/schemas/Account) objects that have an Identity [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction) with their corresponding [Account](#/components/schemas/Account) objects that have an ApplicationAccount [AccountAuthenticationFunction](#/components/schemas/AccountAuthenticationFunction), and indicate an SSO-based login flow is available. The following protocol configurations are supported:\n 1. SAML configurations encode the SAML certificate raw public key info\n 2. First party configurations e.g. Microsoft Entra to Microsoft 365 Apps encode the app type + the first party instance specific instance key with a \":\" delimiter\n 3. OIDC configurations encode the lowercased issuer URL (with trailing slash appended) and the client ID, joined by a \",\" delimiter, SHA256 hashed and base64 (standard encoding) encoded. Example input: \"https://login.example.com/tenant/v2.0/,client-id-abc\"\n 4. RADIUS configuration encoding is TBD\n","example":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"items":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationKeys.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.authenticationKeys","typeLabel":"string[]"},"adaptiveAuthenticationMethodSelectionPolicy":{"type":"array","items":{"type":"object","properties":{"policy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].policy","typeLabel":"object"},"riskLevel":{"type":"string","enum":["Critical","Default","High","Low","Moderate"],"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX].riskLevel","typeLabel":"enum\u003cstring>"}},"description":"Defines selection policies for an authentication risk level\n","uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.adaptiveAuthenticationMethodSelectionPolicy","typeLabel":"object[]"},"authenticationMethodSelectionPolicy":{"type":"object","properties":{"accountConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.accountConditions","typeLabel":"object"},"assignedApplicationConditions":{"type":"object","properties":{"context":{"type":"array","description":"Additional context used when evaluating the conditional access","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.context","typeLabel":"object[]"},"overrides":{"type":"array","items":{"type":"string","enum":["AllowAdmin","AllowAll","AllowAnonymous","DenyAdmin","DenyAll","DenyAnonymous"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.overrides","typeLabel":"enum\u003cstring>[]"},"rootOperator":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.isArrayGeneratingDynamicValue","typeLabel":"boolean"},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpKey","typeLabel":"object"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpType","typeLabel":"enum\u003cstring>"},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX].staticConditionValueData","typeLabel":"any"}},"description":"Type for static conditional access expression values","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0.values","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0.arrayOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.0","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpKey","typeLabel":"object"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpType","typeLabel":"enum\u003cstring>"},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.isDynamic","typeLabel":"boolean"},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueContext","typeLabel":"object[]"},"dynamicConditionValueData":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0.dynamicConditionValueData","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.0","typeLabel":"object"},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueType","typeLabel":"enum\u003cstring>"},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object.","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1.staticConditionValueData","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue.data","typeLabel":"object"}},"description":"Typed condition value for static or dynamic values","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1.comparisonOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.1","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpIsDynamicCondition","typeLabel":"boolean"},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionCaseSensitive","typeLabel":"boolean"},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionDiacriticSensitive","typeLabel":"boolean"},"dynamicContentConditionLangage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionLangage","typeLabel":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionResourceInstanceId","typeLabel":"string"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0.dynamicContentConditionSearch","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.0","typeLabel":"object"},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionCaseSensitive","typeLabel":"boolean"},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionDiacriticSensitive","typeLabel":"boolean"},"staticContentConditionLanguage":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionLanguage","typeLabel":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticContentConditionResourceInstanceId","typeLabel":"string"},"staticSearch":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1.staticSearch","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2.searchOpValue","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.2","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource.value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpSource","typeLabel":"object"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].isDynamicEntityIdentifier","typeLabel":"boolean"},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectIdConditionKey","typeLabel":"object"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0.parameters","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.0","typeLabel":"object"},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1.name","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.keySpecification","typeLabel":"object"},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.type","typeLabel":"enum\u003cstring>"},"value":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey.value","typeLabel":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0.objectTypeConditionKey","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.0","typeLabel":"object"},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.isFederated","typeLabel":"boolean"},"authenticationKey":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation.authenticationKey","typeLabel":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.federationInformation","typeLabel":"object"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectId","typeLabel":"string"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1.objectType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX].value","typeLabel":"object"}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTargets","typeLabel":"object[]"},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3.graphOpTypes","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.3","typeLabel":"object"},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpOperands","typeLabel":"array"},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4.logicalOpType","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.4","typeLabel":"object"},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.contentType","typeLabel":"enum\u003cstring>"},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.context","typeLabel":"object[]"},"executionEngine":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.executionEngine","typeLabel":"string"},"scriptContent":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.scriptContent","typeLabel":"string"},"version":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5.version","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator.oneOf.5","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.operator","typeLabel":"object"},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator.type","typeLabel":"enum\u003cstring>"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions.rootOperator","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.assignedApplicationConditions","typeLabel":"object"},"authorizedLocations":{"type":"object","required":["isInherited"],"properties":{"isInherited":{"type":"boolean","description":"When set to true this indicates that the location policy is inherited from another object, otherwise the location policy is directly specified\n","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.isInherited","typeLabel":"boolean"},"policy":{"oneOf":[{"type":"object","description":"_AuthorizedEntityLocationPolicy_ is used to specify locations authorized for use by the specific entity that it is attached to\n","required":["allowAll"],"properties":{"allowAll":{"type":"boolean","description":"When set to true this indicates that all locations are authorized\n","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.allowAll","typeLabel":"boolean"},"authorizedLocations":{"type":"array","description":"These are the locations authorized for use by the entity that has this policy. If none are specified then no locations are allowed. If any are specified and it is desirable for the _assignedLocations_ to be authorized, then they must be explicitly included in the array\n","items":{"type":"object","properties":{"type":{"type":"string","enum":["Network","Physical"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"typeSpecificData":{"oneOf":[{"type":"object","description":"Specify a network location or zone with a name and a list of IP addresses or ranges (including in CIDR notation)\n","properties":{"ipAddressExclusions":{"type":"array","items":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressExclusions","typeLabel":"string[]"},"ipAddressInclusions":{"type":"array","items":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.ipAddressInclusions","typeLabel":"string[]"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.name","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.0","typeLabel":"object"},{"type":"object","description":"A subset of the ISO 19160-4:2023 delivery point specification. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","properties":{"addressedObjectIdentifier":{"type":"object","properties":{"building":{"type":"string","description":"Element identifying the number or name and type of the location edifice or construction\n","example":"The Madrona Refuge Building","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.building","typeLabel":"string"},"door":{"type":"string","description":"Element identifying the apartment, room, or office\n","example":"Suite 301","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.door","typeLabel":"string"},"premisesIdentifier":{"type":"string","description":"Element designating the area or the object on an area associated with the location\n","example":"1126 34th Avenue","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier.premisesIdentifier","typeLabel":"string"}},"description":"Subset of an ISO 19160-4:2023 construct identifying a specific addess within a [Locality](#/components/schemas/Locality). For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.addressedObjectIdentifier","typeLabel":"object"},"countryLevelInformation":{"type":"object","properties":{"countryCode":{"type":"string","description":"Element designating the ISO 3166-1 A-2 country code for the country, territory or area of geopolitical interest\n","example":"US","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryCode","typeLabel":"string"},"countryName":{"type":"string","description":"Element designating the country, dependency, or area of geopolitical interest\n","example":"United States","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.countryName","typeLabel":"string"},"multiCountryRegion":{"type":"string","description":"Element indicating a region in which the country, territory, or area of geopolitical interest is located and by which it is potentially more effectively recognized\n","example":"North America","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation.multiCountryRegion","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 country level information. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.countryLevelInformation","typeLabel":"object"},"locality":{"type":"object","properties":{"district":{"type":"string","description":"Element indicating the name of the area within or adjacent to the specified town\n","example":"Madrona (neighborhood in Seattle)","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.district","typeLabel":"string"},"region":{"type":"string","description":"Element specifying the geographic or administrative area of the country in which the town is situated\n","example":"Washington","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.region","typeLabel":"string"},"town":{"type":"string","description":"Element indicating the name of the populated place associated with the [LocationSpecification](#/components/schemas/LocationSpecification) in which this _Locality_ is being referenced\n","example":"Seattle","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality.town","typeLabel":"string"}},"description":"Subset of ISO 19160-4:2023 locality information identifying the geographical area. For context, the property examples reference the address - The Madrona Refuge Building, Suite 301, 1126 34th Avenue, Seattle, WA, 98112\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.locality","typeLabel":"object"},"postcode":{"type":"string","description":"Postal code or ZIP code\n","example":"98112","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.postcode","typeLabel":"string"},"supplementaryInformation":{"type":"object","properties":{"geoLocation":{"type":"object","required":["latitude","longtitude"],"properties":{"latitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.latitude","typeLabel":"number"},"longtitude":{"type":"number","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation.longtitude","typeLabel":"number"}},"description":"Latitude and longtitude specification for a location","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.geoLocation","typeLabel":"object"},"additionalLocationMetadata":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation.additionalLocationMetadata","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1.supplementaryInformation","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX].typeSpecificData","typeLabel":"object"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0.authorizedLocations","typeLabel":"object[]"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.0","typeLabel":"object"},{"type":"object","description":"_AuthorizedInheritedLocationPolicy_ is used to specify an object that is the source for the location authorization data used by the specific entity the _AuthorizedInheritedLocationPolicy_ is attached to\n","properties":{"sourceObjectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectType","typeLabel":"enum\u003cstring>"},"sourceObjectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1.sourceObjectId","typeLabel":"string"}},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy.oneOf.1","typeLabel":"object"}],"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations.policy","typeLabel":"object"}},"description":"_AuthorizedLocationPolicy_ is used to specify locations authorized for use by accounts, groups, roles, employees, departments, etc.\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.authorizedLocations","typeLabel":"object"},"excludedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.excludedAuthenticationMethods","typeLabel":"object[]"},"includedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy.includedAuthenticationMethods","typeLabel":"object[]"}},"description":"This policy expresses the selection criteria used by an IDP or MFA provider to select authentication methods for use at authentication time (usually as a subset of the enforced authentication methods)\n","uniqueKey":"globalAuthenticationRequirements.authenticationMethodSelectionPolicy","typeLabel":"object"},"availableAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.availableAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.availableAuthenticationMethods","typeLabel":"object[]"},"enforcedAuthenticationMethods":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","uniqueKey":"globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].type","typeLabel":"string"},"description":{"type":"string","uniqueKey":"globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX].description","typeLabel":"string"}},"description":"Authentication methods describe how an [Account](#/components/schemas/Account) is required to authenticate to an enterprise application or identity provider. [Account](#/components/schemas/Account) include a list of enrolled authentication methods for the account, and [Activity](#/components/schemas/Activity) will include the authentication method used for login and other events. The type [AuthenticationMethodType](#/components/schemas/AuthenticationMethodType) is a string that can be one of many different authentication methods recognized by Oleria\n","uniqueKey":"globalAuthenticationRequirements.enforcedAuthenticationMethods.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.enforcedAuthenticationMethods","typeLabel":"object[]"},"passwordPolicy":{"type":"object","required":["expirationLengthInDays","length","resetViaSelfServiceAllowed","reuseDisallowed"],"properties":{"expirationLengthInDays":{"type":"integer","description":"A value of 0 indicates passwords never expire.","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.expirationLengthInDays","typeLabel":"integer"},"length":{"type":"integer","description":"A value of 0 indicates no minimum password length requirement.","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.length","typeLabel":"integer"},"reuseDisallowed":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.reuseDisallowed","typeLabel":"boolean"},"resetViaSelfServiceAllowed":{"type":"boolean","isRequired":true,"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.resetViaSelfServiceAllowed","typeLabel":"boolean"},"characters":{"type":"array","items":{"type":"string","enum":["AlphaUppercase","AlphaLowercase","AlphaCaseInsensitive","Numeric","SpecialSymbolic"],"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.characters.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.characters","typeLabel":"enum\u003cstring>[]"},"mfaRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.mfaRequirements","typeLabel":"enum\u003cstring>"},"policyMetadata":{"type":"array","description":"An array of additional metadata items associated with the permission specification","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata.items.[INDEX]","typeLabel":"object"},"uniqueKey":"globalAuthenticationRequirements.passwordPolicy.policyMetadata","typeLabel":"object[]"}},"description":"The set of rules used by an organization, department, group, etc. to ensure the creation and maintenance of secure passwords\n","uniqueKey":"globalAuthenticationRequirements.passwordPolicy","typeLabel":"object"},"secondaryFactorRequirements":{"type":"string","description":"MFA requirements for an [Account](#/components/schemas/Account) \n","example":"Required","enum":["Adaptive","EnrollmentRequired","Excluded","NotApplicable","NotRequired","Required","Unavailable"],"uniqueKey":"globalAuthenticationRequirements.secondaryFactorRequirements","typeLabel":"enum\u003cstring>"},"ssoExclusions":{"type":"array","description":"An array of account ids for accounts that are excluded from SSO requirements. These are typically used in the context of break glass scenarios\n","items":{"type":"string","description":"An identifier (unique to integrated application) for an [Account](#/components/schemas/Account) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations\n","example":"user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)","uniqueKey":"globalAuthenticationRequirements.ssoExclusions.items.[INDEX]","typeLabel":"string"},"uniqueKey":"globalAuthenticationRequirements.ssoExclusions","typeLabel":"string[]"}},"description":"AuthenticationRequirements are used to specify authentication requirement configuration for Oleria integrated applications as described by their corresponding IntegratedApplication object","isRequired":true,"uniqueKey":"globalAuthenticationRequirements","typeLabel":"object"},"globalDeploymentKey":{"type":"string","description":"Translated from IntegratedApplication.key. Oleria-assigned stable deployment identifier.\nUsed as the primary key for deployment resolution (resolution priority 1).\n","isRequired":true,"uniqueKey":"globalDeploymentKey","typeLabel":"string"},"globalId":{"type":"string","description":"Opaque platform-assigned identifier for this integrated application node.","isRequired":true,"uniqueKey":"globalId","typeLabel":"string"},"oleriaObjectMetadata":{"type":"object","properties":{"enrichmentVersion":{"type":"string","uniqueKey":"oleriaObjectMetadata.enrichmentVersion","typeLabel":"string"},"generatedTime":{"type":"string","format":"date-time","uniqueKey":"oleriaObjectMetadata.generatedTime","typeLabel":"string\u003cdate-time>"}},"description":"object metadata supersets object metadata with platform enrichment provenance — the enrichment version and the time the record was generated\n","isRequired":true,"uniqueKey":"oleriaObjectMetadata","typeLabel":"object"},"labels":{"type":"array","items":{"type":"object","properties":{"id":{"type":"string","uniqueKey":"labels.items.[INDEX].id","typeLabel":"string"},"name":{"type":"string","uniqueKey":"labels.items.[INDEX].name","typeLabel":"string"},"namespace":{"type":"string","uniqueKey":"labels.items.[INDEX].namespace","typeLabel":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"],"uniqueKey":"labels.items.[INDEX].type","typeLabel":"enum\u003cstring>"},"value":{"oneOf":[{}],"uniqueKey":"labels.items.[INDEX].value","typeLabel":"any"}},"uniqueKey":"labels.items.[INDEX]","typeLabel":"object"},"uniqueKey":"labels","typeLabel":"object[]"},"supportedFederatedRelationships":{"type":"array","description":"An array of relationship types supported for federated connections e.g. [EntityAssignedAccessToObject](#/components/schemas/EntityAssignedAccessToObject) or [IdentityAccountMemberOfUserGroup](#/components/schemas/IdentityAccountMemberOfUserGroup). If federated connections are supported, then Oleria will use data in the edges emitted by the source application to do composite graph connections for the relevant source entities\n","items":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"supportedFederatedRelationships.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"supportedFederatedRelationships","typeLabel":"enum\u003cstring>[]"},"unsupportedTypes":{"type":"object","description":"Declares object and relationship types that this integration does not support despite its declared schema profile. Omitted when the integration fully satisfies its declared profile contract. See UnsupportedTypeSet for semantics.\n","properties":{"objectTypes":{"type":"array","description":"Object types not supported by this integration despite the declared schema profile. All relationships involving these types are implicitly excluded.","items":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"],"uniqueKey":"unsupportedTypes.objectTypes.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"unsupportedTypes.objectTypes","typeLabel":"enum\u003cstring>[]"},"relationshipTypes":{"type":"array","description":"Relationship types explicitly excluded where endpoint object types ARE still supported. Only needed for relationship-specific exclusions not covered by objectTypes closure.","items":{"type":"string","description":"The enumerated list of all Oleria relationships used to describe and manage the connections among Oleria objects. Furthermore, these connections amongst objects complete the definiton of an Oleria composite graph used to represent a customer's full (potentally cross-application) identity security. The definition of each relationship describes its usage and the description includes a \"GraphNotation:\" which gives a normative way of describing the relationship using the connected ObjectTypes, abstract Relationship, and potential field matching.","example":"ResourceInstanceContainsResourceInstance","enum":["AccountCanImpersonateAccount","AccountMemberOfRole","AccountMemberOfUserGroup","AgentHasVersion","ApplicationAccountCanImpersonateApplicationAccount","ApplicationAccountMemberOfRole","ApplicationAccountMemberOfUserGroup","AssignedApplicationHasAccountRole","CredentialAuthenticatesEntity","DepartmentContainsDepartment","EmployeeManagesEmployee","EmployeeServingInDepartment","EnrollmentViaAuthenticator","EntitlementOnEntityExpressedViaObject","EntityAssignedAccessToObject","EntityCanImpersonateEntity","EntityHasAccount","EntityManagedViaObject","EntityRequiresObject","IdentityAccountAssignedAccessToAssignedApplication","IdentityAccountCanImpersonateIdentityAccount","IdentityAccountMemberOfRole","IdentityAccountMemberOfUserGroup","IntegratedApplicationHasAccountRole","IntegratedApplicationRegisteredWithDirectoryProvider","ObjectHasExtension","ObjectDirectoryContainsObject","PermissionSetAccessToResourceInstance","PersonIsEmployee","ResourceClassHasResourceInstance","ResourceInstanceContainsResourceInstance","RoleAccessToResourceClass","RoleAssignedAccessToAssignedApplication","RoleHasPermissionSet","RoleMemberOfRole","UserGroupAssignedAccessToAssignedApplication","UserGroupAssignedAccessToResourceInstance","UserGroupMemberOfRole","UserGroupMemberOfUserGroup","UserGroupSyncsWithUserGroup"],"uniqueKey":"unsupportedTypes.relationshipTypes.items.[INDEX]","typeLabel":"enum\u003cstring>"},"uniqueKey":"unsupportedTypes.relationshipTypes","typeLabel":"enum\u003cstring>[]"}},"uniqueKey":"unsupportedTypes","typeLabel":"object"},"vendorName":{"type":"string","description":"Name of the vendor for the enterprise application or identity provider product","example":"Microsoft","uniqueKey":"vendorName","typeLabel":"string"},"enrichedResolvedDeploymentId":{"type":"string","description":"Global ID of the Oleria ApplicationDeployment this node resolved to. Denormalized cache of the\nOleria ApplicationReferencedBy edge, which is authoritative; set by the deployment resolution\npipeline after matching.\n","uniqueKey":"enrichedResolvedDeploymentId","typeLabel":"string"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"authenticationRequirements":{"isMFAAuthority":true,"isSSOBasedMFARequired":false,"authenticationKeys":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"adaptiveAuthenticationMethodSelectionPolicy":[{"policy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"riskLevel":"Critical"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"availableAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"enforcedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"passwordPolicy":{"expirationLengthInDays":123,"length":123,"reuseDisallowed":true,"resetViaSelfServiceAllowed":true,"characters":["AlphaUppercase"],"mfaRequirements":"Required","policyMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"secondaryFactorRequirements":"Required","ssoExclusions":["user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)"]},"category":"BusinessApplication","id":"app:O_kgDOCfJllg (GitHub)","key":"O_kgDOCfJllg (GitHub)","name":"roanokedatasecurity","objectMetadata":{"ApplicationInstanceId":"\u003cstring>","GeneratedTime":"2023-11-07T05:31:56Z","Profile":"Account","ObjectOrRelationshipType":"\u003cstring>"},"globalAuthenticationRequirements":{"isMFAAuthority":true,"isSSOBasedMFARequired":false,"authenticationKeys":["XD+NWux+oeqdAa1eUPtNC06g/HtrzM6AbNiZU2MhHSM="],"adaptiveAuthenticationMethodSelectionPolicy":[{"policy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"riskLevel":"Critical"}],"authenticationMethodSelectionPolicy":{"accountConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"assignedApplicationConditions":{"context":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"overrides":["AllowAdmin"],"rootOperator":{"operator":{"isArrayGeneratingDynamicValue":true,"arrayOpKey":{"keySpecification":{"parameters":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"type":"Function","value":"\u003cstring>"},"arrayOpType":"In","arrayOpValue":{"values":[{"staticConditionValueType":"activity_type","staticConditionValueData":"\u003cunknown>"}]}},"type":"Array"}},"authorizedLocations":{"isInherited":true,"policy":{"allowAll":true,"authorizedLocations":[{"type":"Network","typeSpecificData":{"ipAddressExclusions":["\u003cstring>"],"ipAddressInclusions":["\u003cstring>"],"name":"\u003cstring>","supplementaryInformation":{"geoLocation":{"latitude":123,"longtitude":123},"additionalLocationMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]}}}]}},"excludedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"includedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}]},"availableAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"enforcedAuthenticationMethods":[{"type":"\u003cstring>","description":"\u003cstring>"}],"passwordPolicy":{"expirationLengthInDays":123,"length":123,"reuseDisallowed":true,"resetViaSelfServiceAllowed":true,"characters":["AlphaUppercase"],"mfaRequirements":"Required","policyMetadata":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}]},"secondaryFactorRequirements":"Required","ssoExclusions":["user:U_kgDOB7P6Rg (GitHub based on node identifier), 838439349399 (Google Workspace based on user id), user:wiz-inc-4db1c46901 (GitHub based on app slug)"]},"globalDeploymentKey":"\u003cstring>","globalId":"\u003cstring>","oleriaObjectMetadata":{"enrichmentVersion":"\u003cstring>","generatedTime":"2023-11-07T05:31:56Z"},"labels":[{"id":"\u003cstring>","name":"\u003cstring>","namespace":"\u003cstring>","type":"array_boolean","value":"\u003cunknown>"}],"supportedFederatedRelationships":["ResourceInstanceContainsResourceInstance"],"unsupportedTypes":{"objectTypes":["Account"],"relationshipTypes":["ResourceInstanceContainsResourceInstance"]},"vendorName":"Microsoft","enrichedResolvedDeploymentId":"\u003cstring>"}}},"exampleType":"generated"}},"exampleType":"generated"},"41589d47-92b8-4f44-9dac-f4a8ab857855":{"description":"The request was malformed, for example an invalid cursor or page size.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"BAD_REQUEST","message":"The request was malformed."},"examples":{"Example":{"title":"Example","value":{"code":"BAD_REQUEST","message":"The request was malformed."}}},"exampleType":"examples"}},"exampleType":"examples"},"9ea3a2fa-c2d5-4f01-9515-972be43dd924":{"description":"Missing or invalid authentication token.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."},"examples":{"Example":{"title":"Example","value":{"code":"UNAUTHORIZED","message":"Missing or invalid authentication token."}}},"exampleType":"examples"}},"exampleType":"examples"},"cda17f5b-453a-4fbd-ac35-d14c767973fa":{"description":"The token lacks the scope required for this resource.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"FORBIDDEN","message":"The token lacks the required scope."},"examples":{"Example":{"title":"Example","value":{"code":"FORBIDDEN","message":"The token lacks the required scope."}}},"exampleType":"examples"}},"exampleType":"examples"},"f2a8e368-9e5a-474d-9c5c-3bc596d92130":{"description":"No resource exists with the given id.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"NOT_FOUND","message":"No resource with the given id."},"examples":{"Example":{"title":"Example","value":{"code":"NOT_FOUND","message":"No resource with the given id."}}},"exampleType":"examples"}},"exampleType":"examples"},"ede43fec-8b51-4f27-8c21-6019d5889d27":{"description":"Rate limit exceeded. Retry after the interval in the Retry-After header.","headers":{"Retry-After":{"description":"Seconds to wait before retrying.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."},"examples":{"Example":{"title":"Example","value":{"code":"TOO_MANY_REQUESTS","message":"Rate limit exceeded. Retry after the specified interval."}}},"exampleType":"examples"}},"exampleType":"examples"},"427ae571-e70c-43d2-9e5f-a05a7d7446dc":{"description":"An unexpected error occurred.","content":{"application/json":{"schema":{"type":"object","description":"Error envelope. `code` is a stable machine-readable identifier; `message` is human-readable.","required":["code","message"],"properties":{"code":{"type":"string","description":"Stable, machine-readable error code (SCREAMING_SNAKE_CASE).","example":"NOT_FOUND","isRequired":true,"uniqueKey":"code","typeLabel":"string"},"message":{"type":"string","description":"Human-readable description of the error.","example":"No resource with the given id.","isRequired":true,"uniqueKey":"message","typeLabel":"string"},"details":{"type":"object","description":"Optional free-form context for debugging.","additionalProperties":true,"uniqueKey":"details","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."},"examples":{"Example":{"title":"Example","value":{"code":"INTERNAL_ERROR","message":"An unexpected error occurred."}}},"exampleType":"examples"}},"exampleType":"examples"}},"security":{"08a115fa-40db-4379-b00c-70852704c94c":{"oauth2":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"}}},"servers":{"7524c4d0-f52d-433a-b349-e1a06ce637b4":{"url":"https://devx.{environment}.oleria.io","description":"Oleria API server.","variables":{"environment":{"default":"prod","description":"Your Oleria deployment, for example `acme` for `https://devx.acme.oleria.io`. Substitute it in the OAuth scope names as well, since OpenAPI applies a server variable to the URL only and the scopes are published with the placeholder still in them."}}}},"schemas":{"75823a02-39de-498b-ac65-a3ae2aab2474":{"type":"object","properties":{"operator":{"oneOf":[{"type":"object","description":"Condition used to specify conditional access based on presence or absence of the key data in the given array of values","required":["isArrayGeneratingDynamicValue"],"properties":{"isArrayGeneratingDynamicValue":{"type":"boolean","isRequired":true},"arrayOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"arrayOpType":{"type":"string","description":"Supported operators for array conditions","enum":["In","NotIn"]},"arrayOpValue":{"oneOf":[{"type":"object","description":"Array of static values used as an operand in array conditions","properties":{"values":{"type":"array","items":{"type":"object","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}},"description":"Type for static conditional access expression values"}}}},{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on key - value comparison","properties":{"comparisonOpKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"comparisonOpType":{"type":"string","description":"Supported operators for comparison conditions","enum":["Contains","DoesNotContain","Equal","GreaterThan","GreaterThanOrEqual","LessThan","LessThanOrEqual","NotEqual"]},"comparisonOpValue":{"type":"object","required":["isDynamic"],"properties":{"isDynamic":{"type":"boolean","isRequired":true},"data":{"oneOf":[{"type":"object","description":"Type for dynamic conditional access expression values. These will resolve to static ConditionValueTypes (or arrays of static ConditionValueTypes) by a relevant authorization function","properties":{"dynamicConditionValueContext":{"type":"array","description":"This context can be passed to the function that resolves the dynamic specification to a static one","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"dynamicConditionValueData":{"type":"string"}}},{"type":"object","description":"Type for static conditional access expression values","properties":{"staticConditionValueType":{"type":"string","description":"Types for condition values used in specifying static conditional access expression values","enum":["activity_type","boolean","float","int32","int64","object","object_type","relationship_type","string"]},"staticConditionValueData":{"description":"The static value being compared against. Its JSON type is the one named by staticConditionValueType: a string for string, activity_type, object_type and relationship_type; a number for float, int32 and int64; a boolean for boolean; and a JSON object only for object."}}}]}},"description":"Typed condition value for static or dynamic values"}}},{"type":"object","description":"Condition used to specify conditional access based on data inside a resource instance","required":["searchOpIsDynamicCondition"],"properties":{"searchOpIsDynamicCondition":{"type":"boolean","isRequired":true},"searchOpValue":{"oneOf":[{"type":"object","description":"A condition used to a target content search conditional access expression with a dynamic search string","required":["dynamicContentConditionCaseSensitive","dynamicContentConditionDiacriticSensitive"],"properties":{"dynamicContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"dynamicContentConditionLangage":{"type":"string"},"dynamicContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"dynamicContentConditionSearch":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"A condition used to specify a target content search conditional access expression with a static search string","required":["staticContentConditionCaseSensitive","staticContentConditionDiacriticSensitive"],"properties":{"staticContentConditionCaseSensitive":{"type":"boolean","isRequired":true},"staticContentConditionDiacriticSensitive":{"type":"boolean","isRequired":true},"staticContentConditionLanguage":{"type":"string"},"staticContentConditionResourceInstanceId":{"type":"string","description":"An identifier (unique to the integrated application) for a [ResourceInstance](#/components/schemas/ResourceInstance) object represented in the Oleria system. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. It is important for this identifier to be based on an underlying persistent and reusable application or identity provider id so connections to the object are robust to metadata changes and other relevant operations \n","example":"repo:R_kgDOLL0doQ (GitHub based on repository node identifier), 1BUxdX4M-H7X8GKRgTjprJS8fjY_Ij1giE82lQlny2kc (Google Drive based on file id)"},"staticSearch":{"type":"string"}}}]}}},{"type":"object","description":"Condition used to specify conditional access based on graph entity relationships","properties":{"graphOpSource":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"},"graphOpTargets":{"type":"array","items":{"type":"object","required":["isDynamicEntityIdentifier"],"properties":{"isDynamicEntityIdentifier":{"type":"boolean","isRequired":true},"value":{"oneOf":[{"type":"object","description":"ConditionGraphOperatorConditionKeyEntityIdentifier is used to reference a entity (node) in the graph with [ConditionKey](#/components/schemas/ConditionKey)-based dynamic values for _objectId_ and _objectType_\n","properties":{"objectIdConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"},"objectTypeConditionKey":{"type":"object","properties":{"keySpecification":{"oneOf":[{"type":"object","properties":{"parameters":{"type":"array","description":"Optional parameters used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}}}},{"type":"object","description":"Contextual object specifier for a condition key that is derefencing its value from an object type","properties":{"name":{"type":"string"}}}]},"type":{"type":"string","description":"The following types of keys are used to specify conditional access expressions:\n1. A _Function_ key is used to identify a runtime function that will resolve to a value e.g. isLoggedIn, isImpersonatingUser, etc.\n2. A _Object_ key is used to identify a particular field on an object where the value of the field on the object is used to determine the validity of the condition\n","enum":["Function","Object"]},"value":{"type":"string"}},"description":"Identifies the entity or function data used to evaluate the validity of a condition against the specified condition value"}}},{"type":"object","description":"Used for typed indentification of an entity (node) in the graph with values for _objectId_ and _objectType_\n","properties":{"federationInformation":{"type":"object","required":["isFederated"],"properties":{"isFederated":{"type":"boolean","isRequired":true},"authenticationKey":{"type":"string"}},"description":"Federation information used when specifying an _EntityIdentifier_\n"},"objectId":{"minLength":1,"type":"string","description":"An identifier (unique to the integrated or assigned application) of any object or entity represented in the Oleria system as well as any relationship or connection among entities when they are represented in Oleria. Oleria converts these identifiers to global ids so they can be unique in the context of the global system graph. The full list of Oleria objects or entities is defined by the object-type enumeration, and the full list of relationships or connections is defined by the relationship-type enumeration\n"},"objectType":{"type":"string","description":"The enumerated list of all Oleria objects used to describe and manage any customer application's identity security. The definition of each object describes its usage","example":"Account","enum":["Account","AccountRole","Activity","Agent","AgentVersion","AssignedApplication","Authenticator","AuthenticatorEnrollment","Credential","Department","DirectoryProvider","Employee","IntegratedApplication","None","ObjectDirectory","PermissionSet","Person","ResourceClass","ResourceInstance","RiskDefinition","RiskViolation","Role","UserGroup"]}}}]}},"description":"ConditionGraphOperatorEntityIdentifier is used to reference a entity (node) in the graph"}},"graphOpTypes":{"type":"string","description":"Supported operators for graph conditions","enum":["AssignedAccessTo","MemberOf"]}}},{"type":"object","description":"Condition used to specify conditional access based on a logical (AND, OR, NOT, EXISTS, ORDERED) operation","properties":{"logicalOpOperands":{"type":"array","items":{"$circularRef":"75823a02-39de-498b-ac65-a3ae2aab2474"}},"logicalOpType":{"type":"string","description":"Supported operators for logical conditions","enum":["And","Exists","Not","Or","Ordered"]}}},{"type":"object","description":"A condition used to specify a script based conditional access expression","properties":{"contentType":{"type":"string","description":"Content types used to specify scripts for conditional access","enum":["JavaScript","JSON","XML"]},"context":{"type":"array","description":"Additional context used when accessing the data referenced by the condition key e.g. Function key parameters","items":{"type":"object","properties":{"id":{"type":"string"},"name":{"type":"string"},"namespace":{"type":"string"},"type":{"type":"string","enum":["array_boolean","array_float32","array_float64","array_int32","array_int64","array_string","boolean","float32","float64","int32","int64","oleria_global_id","oleria_local_id","pem","property_bag","rfc3339_date","string"]},"value":{"oneOf":[{}]}}}},"executionEngine":{"type":"string"},"scriptContent":{"type":"string"},"version":{"type":"string"}}}]},"type":{"type":"string","description":"Categories of operators that can be used with conditional expressions","enum":["Array","Comparison","ContentSearch","Graph","Logical","SecureScript"]}}}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"oauth2","description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","flows":{"clientCredentials":{"tokenUrl":"https://auth.prod.oleria.io/oauth/token","scopes":{"https://devx.{environment}.oleria.io/delete":"Irreversibly destroy an object in the source system.","https://devx.{environment}.oleria.io/read":"Read identity and access data, and the jobs that change it.","https://devx.{environment}.oleria.io/write":"Make reversible changes: grant, enable, assign, revoke and remove access."}}},"scopes":["https://devx.{environment}.oleria.io/read"],"schemeName":"oauth2"},"schema":{"title":"OAuth2 Auth","type":"string","isRequired":true,"description":"OAuth 2.0 client-credentials flow. Request an access token from the token endpoint and send it as `Authorization: Bearer \u003ctoken>`.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"oauth2","name":"Authorization"}],"title":"oauth2"}]},"originalFileLocation":"developer-docs/api-reference/oleria-public-api-1.0.0.yaml"},"subdomain":"oleria","siteName":"Oleria Identity Security","title":"Get - Oleria Identity Security","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-23T12:43:14.438Z","originalFileLocation":"api-reference/integrated-applications/get.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"light\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Returns an integrated application by its global id. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Get - Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:description\" content=\"Returns an integrated application by its global id. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.oleria.com/api-reference/integrated-applications/get\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Integrated+applications\u0026amp;title=Get\u0026amp;description=Returns+an+integrated+application+by+its+global+id.+Requires+the+%60https%3A%2F%2Fdevx.%7Benvironment%7D.oleria.io%2Fread%60+scope.\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=ddd4b04f993b65e9d30188b747a1b5d619004693ddceafb1a486352024968971\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Get - Oleria Identity Security\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Returns an integrated application by its global id. Requires the https://devx.{environment}.oleria.io/read scope.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://oleria.mintlify.app/_mintlify/api/og/v2?division=Integrated+applications\u0026amp;title=Get\u0026amp;description=Returns+an+integrated+application+by+its+global+id.+Requires+the+%60https%3A%2F%2Fdevx.%7Benvironment%7D.oleria.io%2Fread%60+scope.\u0026amp;theme=67101527a6023bf85b2b7e70\u0026amp;signature=ddd4b04f993b65e9d30188b747a1b5d619004693ddceafb1a486352024968971\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/oleria/VFsEjt_GQ9jb2s6K/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Oleria Identity Security\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#027864\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.oleria.com/api-reference/integrated-applications/get\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/api-reference/integrated-applications/get.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.oleria.com/#organization\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/oleria/KyPIHO-0OF6fE_DF/images/OleriaLightMode-1.png?fit=max\u0026auto=format\u0026n=KyPIHO-0OF6fE_DF\u0026q=85\u0026s=906d33a8c505e2a96b7c6a1583335e1d\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.oleria.com#website\",\"name\":\"Oleria Identity Security\",\"url\":\"https://docs.oleria.com\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.oleria.com/api-reference/integrated-applications/get#webpage\",\"url\":\"https://docs.oleria.com/api-reference/integrated-applications/get\",\"name\":\"Get\",\"description\":\"Returns an integrated application by its global id. Requires the https://devx.{environment}.oleria.io/read scope.\",\"dateModified\":\"2026-10-23T12:43:14.438Z\",\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"},\"breadcrumb\":{\"@id\":\"https://docs.oleria.com/api-reference/integrated-applications/get#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.oleria.com/api-reference/integrated-applications/get#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inventory \u0026 Actions\",\"item\":\"https://docs.oleria.com/api-reference/access-assignments/list\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Integrated applications\",\"item\":\"https://docs.oleria.com/api-reference/integrated-applications/list\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Get\",\"item\":\"https://docs.oleria.com/api-reference/integrated-applications/get\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://docs.oleria.com/api-reference/integrated-applications/get#apireference\",\"headline\":\"Get\",\"name\":\"Get\",\"description\":\"Returns an integrated application by its global id. Requires the https://devx.{environment}.oleria.io/read scope.\",\"url\":\"https://docs.oleria.com/api-reference/integrated-applications/get\",\"mainEntityOfPage\":{\"@id\":\"https://docs.oleria.com/api-reference/integrated-applications/get#webpage\"},\"dateModified\":\"2026-10-23T12:43:14.438Z\",\"publisher\":{\"@id\":\"https://docs.oleria.com/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.oleria.com#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Oleria Identity Security\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Oleria Identity Security","nav":{"global":null,"tabs":[{"tab":"Product","pages":[{"title":"Product","href":"/introduction/overview"}]},{"tab":"Integrations","pages":[{"title":"Integrations","href":"/integrations/overview"}]},{"tab":"API Reference","groups":[{"group":"Getting Started","pages":[{"title":"API Overview","href":"/developer-docs/api-reference/overview"},{"title":"Generate an API Token","href":"/developer-docs/api-reference/generate-token"}]},{"group":"Inventory \u0026 Actions","pages":[{"group":"Access assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object","href":"/api-reference/access-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-assigned-access-to-object/{id}","href":"/api-reference/access-assignments/get"}]},{"group":"Account roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles","href":"/api-reference/account-roles/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/account-roles/{id}","href":"/api-reference/account-roles/get"}]},{"group":"Accounts","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts","href":"/api-reference/accounts/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/accounts/{id}","href":"/api-reference/accounts/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts","href":"/api-reference/accounts/create"},{"title":"Activate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/activate","href":"/api-reference/accounts/activate"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/disable","href":"/api-reference/accounts/disable"},{"title":"Enable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/enable","href":"/api-reference/accounts/enable"},{"title":"Revoke active sessions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/accounts/{id}/revoke-sessions","href":"/api-reference/accounts/revoke-active-sessions"},{"title":"Remove access to shared resources","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}/resource-access","href":"/api-reference/accounts/remove-access-to-shared-resources"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/accounts/{id}","href":"/api-reference/accounts/delete"}]},{"group":"Activities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities","href":"/api-reference/activities/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/activities/{id}","href":"/api-reference/activities/get"}]},{"group":"Assigned applications","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications","href":"/api-reference/assigned-applications/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/assigned-applications/{id}","href":"/api-reference/assigned-applications/get"},{"title":"Grant an account access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/grant-an-account-access"},{"title":"Remove an account's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-accounts/{accountId}","href":"/api-reference/assigned-applications/remove-an-accounts-access"},{"title":"Grant a group access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/grant-a-group-access"},{"title":"Remove a group's access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/assigned-applications/{id}/assigned-groups/{groupId}","href":"/api-reference/assigned-applications/remove-a-groups-access"}]},{"group":"Authenticator enrollments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments","href":"/api-reference/authenticator-enrollments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticator-enrollments/{id}","href":"/api-reference/authenticator-enrollments/get"}]},{"group":"Authenticators","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators","href":"/api-reference/authenticators/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/authenticators/{id}","href":"/api-reference/authenticators/get"}]},{"group":"Department assignments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department","href":"/api-reference/department-assignments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-serving-in-department/{id}","href":"/api-reference/department-assignments/get"}]},{"group":"Department hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department","href":"/api-reference/department-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/department-contains-department/{id}","href":"/api-reference/department-hierarchy/get"}]},{"group":"Departments","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments","href":"/api-reference/departments/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/departments/{id}","href":"/api-reference/departments/get"}]},{"group":"Employees","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees","href":"/api-reference/employees/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employees/{id}","href":"/api-reference/employees/get"}]},{"group":"Enrollment links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator","href":"/api-reference/enrollment-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/enrollment-via-authenticator/{id}","href":"/api-reference/enrollment-links/get"}]},{"group":"Impersonation grants","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity","href":"/api-reference/impersonation-grants/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-can-impersonate-entity/{id}","href":"/api-reference/impersonation-grants/get"}]},{"group":"Integrated applications","pages":[{"title":"List","description":"Returns a page of integrated applications. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications","href":"/api-reference/integrated-applications/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/integrated-applications/{id}","href":"/api-reference/integrated-applications/get"}]},{"group":"Managed-via relationships","pages":[{"title":"List","description":"Returns a page of managed-via relationships. Pass `pageToken` from the previous response's `nextPageToken` to fetch the next page. A page can be empty while the results are still being prepared. Keep requesting pages until the response has no `nextPageToken`. Requires the `https://devx.{environment}.oleria.io/read` scope.","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object","href":"/api-reference/managed-via-relationships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-managed-via-object/{id}","href":"/api-reference/managed-via-relationships/get"}]},{"group":"Memberships","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity","href":"/api-reference/memberships/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/entity-member-of-entity/{id}","href":"/api-reference/memberships/get"}]},{"group":"Non-human identities","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities","href":"/api-reference/non-human-identities/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/non-human-identities/{id}","href":"/api-reference/non-human-identities/get"},{"title":"Disable","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/non-human-identities/{id}/disable","href":"/api-reference/non-human-identities/disable"}]},{"group":"Object extensions","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension","href":"/api-reference/object-extensions/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/object-has-extension/{id}","href":"/api-reference/object-extensions/get"}]},{"group":"Person-employee links","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee","href":"/api-reference/person-employee-links/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/person-is-employee/{id}","href":"/api-reference/person-employee-links/get"}]},{"group":"Persons","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons","href":"/api-reference/persons/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/persons/{id}","href":"/api-reference/persons/get"}]},{"group":"Reporting lines","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee","href":"/api-reference/reporting-lines/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/employee-manages-employee/{id}","href":"/api-reference/reporting-lines/get"}]},{"group":"Resource classes","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes","href":"/api-reference/resource-classes/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-classes/{id}","href":"/api-reference/resource-classes/get"}]},{"group":"Resource hierarchy","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance","href":"/api-reference/resource-hierarchy/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instance-contains-resource-instance/{id}","href":"/api-reference/resource-hierarchy/get"}]},{"group":"Resource instances","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances","href":"/api-reference/resource-instances/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/resource-instances/{id}","href":"/api-reference/resource-instances/get"},{"title":"Revoke anonymous access","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/anonymous-access","href":"/api-reference/resource-instances/revoke-anonymous-access"},{"title":"Revoke external sharing","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/external-shares","href":"/api-reference/resource-instances/revoke-external-sharing"},{"title":"Remove an account's permissions","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/resource-instances/{id}/permissions/{accountId}","href":"/api-reference/resource-instances/remove-an-accounts-permissions"}]},{"group":"Roles","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles","href":"/api-reference/roles/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/roles/{id}","href":"/api-reference/roles/get"},{"title":"Assign to an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/assign-to-an-account"},{"title":"Remove from an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/roles/{id}/assignees/{accountId}","href":"/api-reference/roles/remove-from-an-account"}]},{"group":"User groups","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups","href":"/api-reference/user-groups/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/user-groups/{id}","href":"/api-reference/user-groups/get"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/user-groups","href":"/api-reference/user-groups/create"},{"title":"Add an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml put /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/add-an-account"},{"title":"Remove an account","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml delete /v1/user-groups/{id}/members/{accountId}","href":"/api-reference/user-groups/remove-an-account"}]}]},{"group":"Action jobs","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs","href":"/api-reference/action-jobs/list"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}","href":"/api-reference/action-jobs/get"},{"title":"List results","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml get /v1/action-jobs/{id}/results","href":"/api-reference/action-jobs/list-results"},{"title":"Revert","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/oleria-public-api-1.0.0.yaml post /v1/action-jobs/{id}/revert","href":"/api-reference/action-jobs/revert"}]},{"group":"TrustFusion","pages":[{"group":"Query","pages":[{"title":"Validate","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/validate","href":"/api-reference/query/validate"},{"title":"Execute","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/execute","href":"/api-reference/query/execute"},{"title":"Get a job","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/jobs/{job_id}","href":"/api-reference/query/get-a-job"}]},{"group":"Saved Query","pages":[{"title":"List","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries","href":"/api-reference/saved-query/list"},{"title":"Create","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml post /v1/query/saved-queries","href":"/api-reference/saved-query/create"},{"title":"Get","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/get"},{"title":"Delete","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml delete /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/delete"},{"title":"Update","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml patch /v1/query/saved-queries/{query_id}","href":"/api-reference/saved-query/update"}]},{"group":"Schema","pages":[{"title":"List models","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models","href":"/api-reference/schema/list-models"},{"title":"Get a model","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/trustfusion-openapi-schema-1.0.0.yaml get /v1/schema/models/{model_name}","href":"/api-reference/schema/get-a-model"}]}]},{"group":"Downloads","pages":[{"title":"Working with Downloads","href":"/developer-docs/api-reference/working-with-downloads"},{"group":"Downloads","pages":[{"title":"Create a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml post /v1/downloads","href":"/api-reference/downloads/create-a-download-request"},{"title":"Get a download request","deprecated":null,"version":null,"openapi":"/developer-docs/api-reference/downloads-openapi-schema-1.0.0.yaml get /v1/downloads/{id}","href":"/api-reference/downloads/get-a-download-request"}]}]}]},{"tab":"What's New","pages":[{"title":"What's New","href":"/release-notes"}]}]},"basePath":"","title":"Get - Oleria Identity Security","buildId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","deploymentId":"dpl_345ReqzYaAjzS9QpeJemsKdb7KDj","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-C8RPHPxo.js","utils-0BK-9q6z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-DfjzsUJT.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-B4v9psJ4.js","snippetPresets-CpTQv-Ez.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","ApiExamples-BNP-Fvr0.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-BSgu6h1D.js","shallow-Biv1i9Gs.js","getApiPlaygroundDisplay-BoGOXhtF.js","CodeSnippet-DvQoT18_.js","CodeSnippets-Dnpa15xT.js","Page-Buji1S4J.js","getPastedJson-xAIyhUFE.js","icon-S6FBih11.js","MethodPill-SaYeUZyk.js","DuplicateIcon-Cs-p3v2Q.js","createIcon-DjCFEoHq.js","DynamicMarkdown-BcnBltEQ.js","SectionHeading-BUBl0eEF.js","axios-vUo_bRtp.js","Markdown-h4cOoD8d.js","clsx-B2v50t8t.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-DJnKvr0g.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-BHrrjR1K.js"]}