The Property Matches Condition is evaluated True, whether a given Active Directory Attribute or Elasticsearch property (depending on the additional settings) has the desired value.