Home
CA Functions
CA Activation
CA Structure & CRLs
Certificate Profiles
Certificate Authorities
Crypto Tokens
Publishers
Validators
RA Functions
Add End Entity
End Entity Profiles
Search End Entities
VA Functions
OCSP Responders
Supervision Functions
Approval Profiles
Approve Actions
System Functions
Roles and Access Rules
Remote Authentication
Peer Systems
Services
System Configuration
ACME Configuration
Autoenrollment Configuration
CMP Configuration
EST Configuration
SCEP Configuration
System Configuration
My Preferences
RA Web
Members
Role : Super Administrator Role
Back to Roles Management
Edit Access Rules
Match with
X509: C, Country
X509: DC, Domain Component
X509: ST, State or Province
X509: L, Locality
X509: O, Organization
X509: OU, Organizational Unit
X509: title, Title
X509: CN, Common name
X509: UID, User identifier
X509: serialNumber, Serial number in DN
X509: Certificate serial number (Recommended)
X509: E, E-mail address in DN
X509: RFC 822 Name (e-mail address)
X509: MS UPN, User Principal Name
X509: With full DN
X509: Any certificate issued by CA
CLI: Username
OAuth 2 JWT: Subject ("sub") claim
OAuth 2 JWT: Issuer ("iss") claim
OAuth 2 JWT: Audience ("aud") claim
OAuth 2 JWT: Object ID ("oid") claim
OAuth 2 JWT: Roles ("roles") claim
OAuth 2 JWT: Keyfactor Roles ("kf.roles") claim
OAuth 2 JWT: E-mail ("email") claim
PublicAccessAuthenticationToken: Any transport (HTTP or HTTPS)
PublicAccessAuthenticationToken: Non-confidential transport (HTTP)
PublicAccessAuthenticationToken: Confidential transport (HTTPS)
CA
OAuth Provider
Match Operator
Match Value
Description
Action
CLI: Username
-
-
Equal, case sens.
ejbca
PublicAccessAuthenticationToken: Any transport (HTTP or HTTPS)
-
-
Not Used
Initial RoleMember.