PingFederate OGNL expression explainer

Reads an expression from an attribute mapping or an issuance criterion and explains it construct by construct, then flags what breaks in production rather than in testing: attributes read without a null check, static Java calls, and criteria that never actually compare anything. Parses only - it never evaluates the expression.

Identity & tokens

Read locally in your browser. The expression is parsed and described, never evaluated — which is the same reason the product itself puts expression authoring behind its own administrative role.

References