In the virtual proxy, you can define what attributes to include from a SAML 2.0 token. Let's say you include the attribute 'role'.
When setting up security rules, you can access this 'user.environment.role'. However, these attributes don't show up in rule builder, in the dropdown under Basic section.
Although, customer properties show up "on the fly".
It would be very helpful if virtual proxy attributes showed up in the same way. So that we don't have to type in the fields manually. Even if Qlik does not know all possible values, it already knows the field name / key. It is security we're talking about. Manual mistakes should be avoided.
Cheers,
Vegard