Dynamic attributes

Edit online

You can capture additional context-based access information in dynamic attributes that you create or customize.

Attributes used to calculate risk score come from various sources. Context-based access can capture and use many default attributes. However, you might require more information to be captured. This data can come from:

  • Data that is gathered when a session is established that is sent to the Attribute Collector Service. This data persists during the session and is stored in the session table in context-based access.  This type of information is gathered by the info.js file.  
  • Data that is derived from a particular request for which authorization is being performed. This data can be stored in either the session or behavior tables.
  • Data that is provided by a PIP during the authorization decision. This data can be stored in either the session or behavior tables.

This type of data can be captured in dynamic attributes.