General differences
- Actions can only return
access deniederror codes and does not support returning anunauthorizederror code. - Standard claims of an
accessTokencannot be deleted using an Action.
Rule specific differences
- The event object in Post Login Actions does not currently provide an alternative for
context.connectionOptionsavailable within Rules. - The event object in Post Login Actions does not currently provide an alternative for accessing any token from upstream IdP for federated users through
user.identitiesobject is available within Rules. - Standard claims of an
idTokencannot be deleted using an Action. - Actions only support modifying the primary user between linked accounts.