Is it possible to configure a rule in Azure ACS so that I can match a claim value with a wildcard/regular expression?

Question

See attached screenshot, I'm trying to create a rule that allows me to control who gets the Administrator role based on the domain of their email address from the google identity provider.

This seems like it should be pretty straight forward; the google apps OAuth provider should probably provide the domain for it's google apps accounts, but as it doesn't at the moment I want to do some sort of wildcard match on the email address.

It's straightforward to handle it in the relying party application, but I'm trying to externalise the identity management function.

Answer 1

The rules engine in ACS is very simple and I don't believe you can do this today. You can do further transformations on the app as you say. The place to write this is probably in the ClaimsAuthorizationManager . Even though it is "in the app side", it would still be well encapsulated and separated from your code.