Global Variables

The Privileged Access Service creates a set of global variables for each SAML user session. These variables are synonyms for common attributes of the LoginUser and Application objects, and are a convenience: you can use a global variable instead of specifying a LoginUser attribute or using Application.Get() to read an Application attribute.

global Variable	Description
ApplicationUrl	A variable that contains the string value specified in the Assertion Consumer Service URL field in the Application Settings tab. Synonymous with the Application attribute “Url.”
AssertionConsumerServiceIndex	A variable in the SAML request that contains the Assertion Consumer Service index value used to identify the Assertion Consumer Service URL. This variable is mutually exclusive with AssertionConsumerServiceURL.
AssertionConsumerServiceURL	A variable that contains the specific Assertion Consumer Service URL that specifies the URL to which the Privileged Access Service sends the SAML response. This variable is mutually exclusive with AssertionConsumerServiceIndex.
Issuer	A variable that contains the entity ID specified in the Issuer field of the Application Settings tab. Synonymous with the Application attribute “Issuer.”
ServiceUrl	A variable that contains the string value specified in the Assertion Consumer Service URL field in the Application Settings tab. Synonymous with the Application attribute “Url.”