Alibaba Cloud IDaaS conditional access policies

This official Alibaba Cloud skill lets an OpenClaw agent manage conditional access policies on an IDaaS (EIAM) instance, which decide under what conditions accounts can sign in to the app portal or open applications. It can create, change, enable, disable and delete policies, set their priority, preview which sign-ins a policy would hit, simulate a policy and run a read-only audit. It works by reading your setup, generating a plan and running it only after you confirm, using the aliyun CLI and EIAM OpenAPI with your credentials. Global MFA settings, instance setup and app SSO setup are out of scope. It makes real changes to sign-in rules in your Alibaba Cloud account, so check each plan before you approve it.