c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> add(store = "Active Directory", types = ("Phase1"), query = ";memberOf;{0}", param = c.Value);


c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> add(store = "Active Directory", types = ("Phase1"), query = ";memberOf;{0}", param = c.Value);


c:[Type == "Phase2"]
=> add(Type = "http://schemas.xmlsoap.org/claims/Group", Value = RegExReplace(c.Value, "^CN=", ""));


c:[Type == "http://schemas.xmlsoap.org/claims/Group", Value =~ "(?i)Egress"]
=> issue(claim = c);