---
title: "Conditions"
slug: "conditions-v6-5"
description: "Set up powerful access controls with condition-based access, claims, and user interactions for enhanced security and flexibility in your system."
updated: 2025-10-31T18:24:54Z
published: 2025-10-31T18:24:54Z
canonical: "support.appgate.com/conditions-v6-5"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.appgate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Conditions

The most powerful way to set up access controls is to use [Condition based access](/v1/docs/access-control-modes). Conditions contain Claims-based access criteria expressions that must equate to true for the Action(s) specified in the Entitlement to be allowed. For example: access may only be allowed if the user is working from an office-based IP address. When the criteria equate to false then the Entitlement will not be allowed (block rule applies). If a [user interaction](/v1/docs/applying-access-controls-user-interactions) has been configured in a Condition, this will be triggered when the access criteria equate to false. User interactions provide an alternative way for the user to unblock access - by updating claims or providing new claims that will now meet the access criteria. For example: providing multi-factor authentication could be an alternative method for gaining access if not working from an office-based IP address.

## Before you start

Pre-configure the following elements:

- MFA Provider for multi-factor user interactions, refer to [MFA Providers](/v1/docs/mfa-providers)
- Identity Provider for password user interactions, refer to [Identity Providers](/v1/docs/identity-providers)
- Customized claims: to use customized claims refer to [User Claims](/v1/docs/user-claims) and [Device claims](/v1/docs/device-claims)

Background information:

- For more detail about Conditions, refer to [access control](/v1/docs/applying-access-controls)
- About Claims, definitions and values, refer to [Claims in Detail](/v1/docs/claims-in-detail)
- Learn more about [user interactions](/v1/docs/applying-access-controls-user-interactions)
- Setting up [MFA Providers](/v1/docs/claim-harvesting-multi-factor-authentication) MFA providers for user interactions
- For tips on the real-time capabilities of the system to control access based on Conditions, refer to [Real-time (re)evaluations](/v1/docs/real-time-reevaluations)

Use the Conditions form for:

- Creating Conditions which can then be used for controlling when will be allowed by the Gateway
- Setting claims-based access criteria which define the exact circumstances under which the Condition will evaluate to 'true'
- Adding user interactions when the access criteria are not met such as entering a valid multi-factor authentication or just displaying a message to provide feedback to the user as to why the Condition evaluated to 'false'
- Scheduling Condition re-evaluations to ensure the Gateway responds in a timely way to any change in the access criteria
- Testing the access criteria to validate its behavior

For details on completing the form, refer to [configure Conditions](/v1/docs/configure-conditions)

## Action Buttons

Action buttons are accessed by clicking the 3 dots to the right of each line item in the table or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item.

- ***View linked Entitlements***. This analyzes the system configuration and determines all the Entitlements that use this Condition.

Key-value pairs related to the identity and content of the user or device and are specific to each session.

A defined access right or permission granted to users or devices, allowing them to access specific resources or functionalities within the Appgate ZTNA system.

An appliance that acts as an enforcement point, controlling user access to protected resources.