aaa.policy.handler.@pre-authentication

@pre_authentication

Variant of @pre_execute for @authentication which is only executed for authentication requests. If this pipeline rejects, the main @authentication and @post_authentication pipelines are skipped, and the request is rejected immediately.

Note: The @ prefix is required for pipeline blocks. The legacy syntax without @ (e.g., pre_authentication {}) is deprecated and emits warnings. Use @pre_authentication {} for new configurations.

See also

• Execution context - Available variables
• Execution pipelines - Pipeline actions and control flow
• until - Control flow

Example

@pre_authentication {
    if all {
        aaa.identity == /@example\.com$/;
    } then {
        aaa.identity = aaa.identity.name;
    }
}