Identity Workspace Settings

Prev Next

The Identity Workspace Settings screen allows you to view and manage many of the elements in the Identity Workspace. When creating multiple Identity Workspaces, the tabs on the Settings screen refer only to the currently displayed Identity Workspace.


Accessing and Editing Identity Workspace Settings

To access the Identity Workspace Settings screen:

  • Click the settings icon:

Permissions

The Permissions tab enables you to apply access rights to various levels of the Platform. There are two levels of access permissions: 

Admins have full administrative capabilities within the Environment to create, modify, and delete entities at that level

Viewers have access to a full view of all data-related objects managed within the Environment.

Note: Permissions can only be defined when using an external IDP.  Changes affecting Permissions may take up to 15 minutes to take effect in the Platform.

For more information, see  Platform Permissions.

Identity Workspace Tiles

The Identity Workspace Settings screen displays the following tiles:

  • Details
  • Attributes
  • Sources
  • Mapper Sets
  • Permissions
Deleting a Workspace
When deleting an Identity Workspace that is already used in Building Blocks, like Conditions or Rulesets, ensure that you remove any building blocks that are used in connected Authorization Workspaces first.

Details

The Details tab of the Identity Workspace screen displays the following:

  • Name
  • Description (optional)
  • Logo URL
    • The Identity Attribute icon is the same logo defined for the Workspace.
  • Workspace ID (unique value)
  • Environment ID (unique value)

The Identity Template Settings section includes:

  • Identity Template ID: An Identity Workspace identifier used by the PDP for the access decision calculation. In a Request Flow, it is sent in the entityType property.
  • Identity Template Matcher: A JSON Path to the JWT request claim or Header property used for matching.
  • Match Type: Can be either Exact, Wildcard, or Regex Match.
  • Match Value/Pattern: The value (for Exact Match) or pattern (Wildcards or Regex) validated by the Identity Template Matcher. If matched, this Identity Template will be used for request processing. See the Managing API Mappers article for more information.
  • Toggles for JWT Validation

Click Edit to modify the Identity Template Settings or Description fields.



Attributes

The Attributes screen is divided into two areas:

  1. Attributes List: Displays all currently defined Identity Attributes.
  2. Details Area: Displays details for the selected Attribute. This is divided into two sections:
    • General Details: Includes Attribute ID, Display Name, Description, and Source.
    • Attribute Usage Settings includes:
      • Whether the Attribute is Available for Policies.
      • Whether it can be used in Access Request.
      • The Type (String or Numeric).

Sources

The Sources tab allows defining Identity Sources:

  • Sources List: Displays all defined sources.
  • General Details: Includes Source Name, Source Type, Source Used As, and Logo URL.
  • Source Details: Varies depending on the Source Type and Source Used By. See Managing Identity Sources for details.

Mapper Sets

In this section, you can view and manage your list of Mapper Sets. For more information, see Managing Identity Mapper Sets.