- Scripted rules are designed such that they can produce multiple OIDC claims, and you should not expect to need more than one per OpenAthens Keystone connection.
- Execution time is limited to one second. After this time the script is stopped and the login attempt will fail before the user is passed to you.
- Any exceptions generated by your script will stop execution and the login attempt will fail before the user is passed to you.
- Input attributes from SAML can be multi-valued and are unordered
At the point of execution the script has access to 3 global objects