Thanks for your reply! Your solution didn't quite work, but in the documentation about rule conditions here I found this table: FunctionDescriptionType contentType() Content type of the target (for example, application/vnd.sas.credential.domain+json ). String contentLength() Length of the request. long uri() URI of the target. String And it seems like I need to use uri() in my condition instead of requestUri(). I modified the rule to uri().contains('/identities/groups/UG_') and it works now.
... View more