Overview
The ValueRegex (basic:AttributeValueRegex prior prior to 3V3.2.0) type matches attributes values against the supplied Java Regular Expression.
Confusingly, theValueRegex type can be a Matcher or a PolicyRequirement.
- If no
attributeIDattribute is specified then it is a Matcher (returning that value if it is present amongst the values, and the empty set otherwise) - If an
attributeIDattribute is specified then it is a PolicyRule (returning true if that that value is present amongst the values for the specified attribute).
Schema Name
The ValueRegex type is defined by defined in the urn:mace:shibboleth:2.0:afp schema namespace, which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd
The deprecated basic:AttributeValueRegex type was defined in the urn:mace:shibboleth:shibboleth:2.0:afp:basic namespace, the schema for which can be found at http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd
Attributes
Two attributes may be specified:
| Name | Type | Default | Description |
|---|---|---|---|
attributeID | String | none | If this is present, then this is a PolicyRule returning true if the corresponding attribute |
| exists and contains a value |
| that matches. If this is not present, then this is a Matcher returning any value that |
| matches, and the empty set otherwise. |
regex |
| Pattern | required | The regular expression to match against |
Child
...
Elements
None
Examples
| Code Block | ||||
|---|---|---|---|---|
| ||||
<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/> |
...