Define a New Attribute Filter

An attribute filter policy describes which attributes are sent to a service provider. The default attribute filter policy file is IdP_HOME/conf/attribute-filter.xml.

...

• ANY - Always evaluates to true
• AND - Evaluates to true if all contained rules are true
• OR - Evaluated to true if any contained rule is true
• NOT - Evaluates to true if the contained rule evaluates to false
• AttributeRequesterString - Evaluates to true if the attribute requester's entity ID matches a given string
• AttributeIssuerString - Evaluates to true if the attribute issuer's entity ID matches a given string
• PrincipalNameString - Evaluates to true if the user's principal name matches a given string
• AuthenticationMethodString - Evaluates to true if the method used to authenticate the user matches a given string
• AttributeValueString - Evaluates to true if the value of a given attribute matches a given string
• AttributeScopeString - Evaluates to the true if the scope of a value of a given attribute matches a given string
• AttributeRequesterRegex - Evaluates to true if the attribute requester's entity ID matches a given regular expression
• AttributeIssuerRegex - Evaluates to true if the attribute issuer's entity ID matches a given regular expression
• PrincipalNameRegex - Evaluates to true if the user's principal name matches a given regular expression
• AuthenticationMethodRegex - Evaluates to true if the method used to authenticate the user matches a given regular expression
• AttributeValueRegex - Evaluates to true if the value of a given attribute matches a given regular expression
• AttributeScopeRegex - Evaluates to the true if the scope of a value of a given attribute matches a given regular expression
• Script - Evaluates a scriptlet to determine if the rule evaluates to true
• AttributeRequesterInEntityGroup - Evaluates to true if the attribute requester is defined within a given entity group in SAML metadata
• AttributeIssuerInEntityGroup - Evaluates to true if the attribute issuer is defined within a given entity group in SAML metadata
• AttributeIssuerNameIDFormatExactMatch - Evaluates to true if the metadata that a given name identifier format is supported by the attribute issuer.
• AttributeRequesterNameIDFormatExactMatch - Evaluates to true if the metadata that a given name identifier format is supported by the attribute requester.
• AttributeIssuerEntityAttributeExactMatch - Evaluates to true if an entity attribute of the issuer exactly matches a given value.
• AttributeRequesterEntityAttributeExactMatch - Evaluates to true if an entity attribute of the requester exactly matches a given value.
• AttributeIssuerEntityAttributeRegexMatch - Evaluates to true if an entity attribute of the issuer matches a given regular expression.
• AttributeRequesterEntityAttributeRegexMatch - Evaluates to true if an entity attribute of the requester matches a given regular expression.
• AttributeInMetadata - Evaluates to true if a given attribute is found in the SP's metadata as a requested attribute.

Loading Multiple Policy Group Files

...