In the document is missing (in the limitations section) a limitation of the advanced filtering for some properties of the data.claims object.
There is no way to filter for some claims properties where their name is represented by JWT specification, for instance:
we can not filtered it based on the emailaddress, name, etc., the reason is the name of the properties, which is a uri format, for instance:
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
Question:
Is there some undocumented workaround to use these properties in the advanced filtering or it will be fixed in the next version?
Thanks
Roman
⚠Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
Hi @romankiss Thanks for reaching out. We will review and update as appropriate.
@spelluru Any inputs in this ?
@banisadr - could you please take a look at it when you get a chance? Thanks
@banisadr Just following up again in case missed the previous communication.
@romankiss I have assigned this to content author for further review and update as appropriate.
Oh, interesting question @romankiss, thanks for bringing it up. I actually don't know if we have a way of doing this at the moment. Let me get back to you shortly.
@romankiss unfortunately we do not have an escape character built into key definitions for advanced filters and barring that, this is not possible today. I've added it to our backlog for consideration during future improvements of filtering.
So that I can include it, are there any other details of your use case you can share and what is being blocked from a functional standpoint?
Thanks Bahram,
Email based filtering would be more accurate than that of name based filter. It would be great if there is a way to get this implemented.
@ajomathew what do you mean by that? Is there a technical difference in what string == [email protected] and email == [email protected] accomplishes?
@banisadr Sorry for the confusion, it would be great to have a filter work with email address.
Right now only
data.claims.http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
data.claims.http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
has email address as a value.
It would be great to have a filter to work with email address as there can be peoples with same names john.[email protected] and john.[email protected] can have same name
John Doe. Hence filter based on name wouldn't work as expected.