cancel
Showing results for 
Search instead for 
Did you mean: 

if host checker fails policy, enable x features....possible?

hostname_
Occasional Contributor

if host checker fails policy, enable x features....possible?

Is it possible to enable/disable features based on a successful or failed host checker result?  For example, if host checker fails that it is a corporate issued device, then only allow certain web links, instead of other options.

 

Thnx

 

H

1 REPLY 1
braker_
Frequent Contributor

Re: if host checker fails policy, enable x features....possible?

Set your host checker policy to evaluate but not enforce at the realm level then use role mapping to assign to a role with the desired functionality.

 

For example:

Rule 1 - Corporate case

  Custom Expression : hostCheckerPolicy = 'Corporate Eval HC Policy' 

or

  Custom Expression : hostCheckerPolicy != 'Non-Corporate Eval HC Policy'    

  Map to Corporate Role

  Stop processing rules on match

Rule 2 - Other case

  Match *

  Map to Non-Corporate Role

 

Note: don't forget to enable the 'stop processing rules' option for Rule 1.