Criteria Scripts are designed to allow re-usable (advanced) expressions to be created that evaluate criteria (Claims) to true or false. Used to define scripted rules which assigns Policies to users and pushes Client auto-updates to devices.
NOTE
Criteria Scripts cannot be used in Conditions.
Before you start
Requirements/Considerations:
The script runs on the Controller once for every user authenticated and Policy. So 1000 users authenticating with 100 Policies configured will result in the script running 100,000 times.
The script runs in a sandboxed JavaScript engine which supports external httpGet/Post/Put/Delete calls.
Background reading:
See Use of Scripts.
Get a better understanding of User claims.
Get a better understanding of Device claims.
Get a better understanding of how Policy assignment decisions are made.
Refer to Claims in Detail for information about all the claims used in the system.
Completing the Criteria Scripts form
Name
Should be a valid JavaScript name. So no white spaces, dashes or special characters. If you are editing an existing script, changing the name may break any existing configuration.
Assignment
Will trigger the appropriate action if true. For more information see Configure Conditions
Criteria Scripts use the same script view and java-script editor tools that are available when you configure Policies directly. So you only need to create one here if you plan to re-use it more than once.
Testing the Criteria Script
There is an Action to allow you to Test the script.