Variables can be used in rules and headers. All rules are concerned:
Variables are stored in the user session. We can distinguish several kind of variables:
When you know the key of the variable, you just have to prefix it with the dollar sign to use it, for example to test if  uid variable match coudot :
$uid =~ /^coudot$/
Below are documented internal variables.
Register what module was used for authentication, user data, password, …
| Key | Description | 
|---|---|
| _auth | Authentication module | 
| _userDB | User module | 
| _passwordDB | Password module | 
| _issuerDB | Issuer module (can be multivalued) | 
| _authChoice | Choice done if authentication choice was used | 
Data concerning the first connection to the portal
| Key | Description | 
|---|---|
| ipAddr | IP of the user (can be the X Forwarded For IP if trusted proxies are configured) | 
| _timezone | Timezone of the user, set with javascript from standard login form (will be empty if other authentication methods are used) | 
| _url | URL used before being redirected to the portal (empty if portal was used as entry point) | 
Data around the authentication process.
| Key | Description | 
|---|---|
| _session_id | Session identifier (carried in cookie) | 
| _user | User found from login process | 
| _password | Password found from login process (only if password store in session is configured) | 
| authenticationLevel | Authentication level | 
| Key | Description | 
|---|---|
| _utime | Timestamp of session creation | 
| startTime | Date of session creation | 
| updateTime | Date of session last modification | 
| _lastAuthnUTime | Timestamp of last authentication time | 
Data related to SAML protocol
| Key | Description | 
|---|---|
| _idp | Name of IDP used for authentication | 
| _idpConfKey | Configuration key of IDP used for authentication | 
| _samlToken | SAML token | 
| _lassoSessionDump | Lasso session dump | 
| _lassoIdentityDump | Lasso identity dump | 
| Key | Description | 
|---|---|
| _notification_id | Date of validation of the notification id | 
| Key | Description | 
|---|---|
| loginHistory | HASH of login success and failures | 
Only with UserDB LDAP.
| Key | Description | 
|---|---|
| dn | Distinguished name | 
| Key | Description | 
|---|---|
| _openid_id | Consent to share attribute id trough OpenID | 
| Key | Description | 
|---|---|
| appsListOrder | Order of categories in the menu |