Page Comparison

Overview

The NameIDFormatExactMatch NameIDFormatExactMatch type describes is a PolicyRule which returns true if the SAML <SSODescriptor> associated with this request supports the configured NameID format

This type replaces the deprecated saml:AttributeRequesterNameIDFormatExactMatch type of V2

metadata for a requester indicates support for the configured <NameID> format.

Schema Name

The NameIDFormatExactMatch  type is defined by defined in the urn:mace:shibboleth:2.0:afp schema, afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd.Prior to release 3.2.0 the 

The deprecated basic:AttributeRequesterRegex  type is defined by defined in the urn:mace:shibboleth:2.0:afp:mf:basic  namespace, the schema , for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd.Use of that namespace is deprecated, but is supported.

Attributes

...

Name	Type

Default

Required?	Description
nameIdFormat

urn

URI

required

Y

The

NameID

format to

test against

check for. Only exact matches against the

<NameIDFormat>

<md:NameIDFormat> elements are made.

Child Elements

None

Example

<PolicyRequirementRule xsi:type="NameIDFormatExactMatch"
	nameIdFormat="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" />

<SPSSODescriptor protocolSupportEnumeration protocolSupportEnumeration="...">
[...]
    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
[...]
<SPSSODescriptor>