When defining the identity membership criteria for segments, the only option for operations between attributes is “AND”. There is an additional limitation because of this that the IdentityAttribute can only be specified once (as expected with AND-only.)
However, in the real world, a Segment may be made up of people who have differing values for a field. Having the ability to add OR clauses for IdentityAttributes selected would be beneficial, and reduce the need for duplicating segments. The OR clause could be handled in the same manner that Campaign Filter criteria are, where the primary operation is AND, but if you add a second option for the same IdentityAttribute, it becomes an OR for that IdentityAttribute.
Use Case:
The client is global and has an IdentityAttribute of Country that lists the country the user is in. They would like to have segments for Users in the Finance Department based in similar regions, suck as “North America”, “Europe”, “Asia”, etc.
The selection criteria for the North American segment would be something like this:
( Counrty==USA OR Country==Canada OR Country==Mexico ) AND Department==Finance
Because there is no option for OR, there are 2 less-than-ideal workarounds that could be used:
- Create a Segement per country in the region, such as “North America - USA - Finance”, North America - Canada - Finance", and “North America - Mexico - Finance”. This would then require you to duplicate all the access available for each of these.
- Create a new IdentityAttribute for Region, and then create a Transform to calculate the Region for each user based on their country. This requires another IA, and another Transform to maintain, and is not scalable if you have several OR conditions to manage.
Reference Topic: Segments in Identity Security Cloud