Unique ID of this target. The ID is used in the string resource properties and to customize the styling of the target on the portal page. The following string resource properties are available:

• protected.application-portal.group.${group-identifier}.target.${identifier}.title for the portal target on the portal page

The suggested values correlate with already existing string resources. If there is no translation, the Identifier is displayed.

account-link-management, address-change, airlock2fa-device-management, cronto-device-management, device-token-management, email-address-change, fido-registration, mtan-token-management, oauth2-consent-management, oauth2-session-management, password-change, self-lockout

Defines the URL or service of this target.

Account Link Management UI Redirect Airlock 2FA Device Management UI Redirect Cronto Device Management UI Redirect Device Token Management UI Redirect FIDO Credential Management UI Redirect OAuth 2.0 Consent Management UI Redirect OAuth 2.0 Session Management UI Redirect Public Self-Service Flow Redirect Redirect to URI Remember-Me Device Management UI Redirect Same Flow Redirect Target Self-Service Flow Redirect Target Application Redirect User Self-Registration Flow Redirect mTAN Token Management UI Redirect

If enabled, an application access is performed prior to being redirected to the target. This is used to enable step-up and/or identity propagation.

This functionality is not needed for Protected Self-Services, where access control is already provided by the "Access Condition" and "Authorization Condition".

true

The target is displayed on the portal if this condition is fulfilled. If no target within a group is displayed, the whole group is not shown.

Account Linking Required Red Flag Condition Active Authentication Method Airlock 2FA Device Deletion Possible Airlock 2FA was used for login (Transaction Approval only) Always False Always True Boolean Condition Cronto Activation Possible Cronto Activation Required Cronto Device Removal Possible Cronto Letter Order Condition Cronto was used for login (Transaction Approval only) CrontoSign Swiss Push Activation Possible Email OTP was used for login (Transaction Approval only) FIDO Credential Removal Possible FIDO was used for login (Transaction Approval only) First Usage of Device Has Cronto Account Has Cronto Device Has Device Token Has Email Address Has FIDO Credential Has Matching Role Has Matrix Card Has OATH OTP Token Has Password Has Suitable Airlock 2FA Device Has Tag Has Vasco OTP Token Has mTAN Activation Letter Has mTAN Token IdP-Initiated SSO Flow On SP Logical AND Logical NOT Logical OR Matching Username Never Migrate Possible New Device Condition Next Authentication Method-based Migration Condition OAuth 2.0 Authorization Code Grant In Progress OIDC prompt=none Condition Password Letter Order Interval Condition Public Self-Service Allowed Condition Red Flag Raised Request Has SSO Ticket Step Activated String Regex Condition User Attribute Is Unique User Identified User Represented Condition Vasco Activation Possible mTAN Number Changed mTAN Number Deletion Possible mTAN Number Registration Possible mTAN was used for login (Transaction Approval only)

Opens the target in a new browser tab.

false