Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Overview

The The Requester  type (basicbasic:AttributeRequesterString  prior to 3V3.2.0) is a PolicyRule which returns true if the name (generally the SAML entityID) of the party system requesting/receiving the attributes (usually the an SP) matches the a supplied string. 

Schema

...

Type and Location

The Requester  type itself is defined by defined within the urn:mace:shibboleth:2.0:afp  namespace, the schema , for which can be located at at http://shibboleth.net/schema/idp/shibboleth-afp.xsd.Prior to release 3.2.0 the basic:AttributeRequesterString  type is defined by the 

A deprecated version of this type is defined within the urn:mace:shibboleth:2.0:afp:mf:basic  namespace, the schema , for which can be located at at http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd.

Use of that namespace is deprecated, but is supported.

Attributes

Two attributes may be specified

...

Reference

Attributes

NameTypeDefaultDescription
valueString
Required, the string to match against
ignoreCase

...

BooleanfalseOptional, specifies how to perform the comparison

Child Elements

None

Example

The example reads "Apply this rule if the attribute recipient is named 'https://sp.example.org'".

Code Block
<PolicyRequirementRule xsi:type="Requester" value="https://sp.example.org" />

 

...