...
Name
(string)- Specifies the
entityID
or<md:EntitiesDescriptor>/@Name
to match against. Matching is exact and case sensitive.
- Specifies the
...
EntityAttributes EntityMatcher
Matches an IdP based on the presence of matching <saml:Attribute>
elements inside a <md:EntityAttributes>
extension in its metadata, or the metadata of its parent <md:EntitiesDescriptor>
element(s). This plugin implements so-called "tag" matching, which is more flexible than a group-based approach that relies on hierarchical containment in a file.
The matching criteria for the plugin are expressed as a set of <saml:Attribute>
elements (or a shorthand for specifiying a single attribute value to check for). Each element contains a set of values. All of the values specified must be found in an extension attribute in the metadata for a match to succeed, but a single such match is sufficient.
That is, the <saml:AttributeValue>
elements within a <saml:Attribute>
form an "AND" criterion, but separate <saml:Attribute>
elements form an "OR" criterion.
Attributes
trimTags
(boolean) (defaults to false)- When true, values found in the metadata are trimmed of leading or trailing whitespace before a direct comparison.
attributeName
(string)- Specifies the
Name
of a<saml:Attribute>
tag to match on. Used as a shorthand syntax when matching against a single tag and value.
- Specifies the
attributeNameFormat
(string)- Specifies the
NameFormat
of a<saml:Attribute>
tag to match on. Used as a shorthand syntax when matching against a single tag and value. When absent, or set to the "unspecified" format, anyNameFormat
is considered a match if theName
matches theattributeName
property.
- Specifies the
attributeValue
(string)- Specifies a
<saml:AttributeValue>
to match on. Used as a shorthand syntax when matching against a single tag and value.
- Specifies a
attributeValueRegex
(regular expression)- Specifies an expression to apply while searching
<saml:AttributeValue>
elements to match on. Used as a shorthand syntax when matching against a single tag and value.
- Specifies an expression to apply while searching
Child Elements
<saml:Attribute>
(one or more, unless shorthand syntax above is used)- Identifies a
<saml:Attribute>
tag to match on. Contains one or more<saml:AttributeValue>
elements containing values or regular expressions to match with. To use a regular expression, add aregex="true"
XML attribute to the<saml:AttributeValue>
element.
- Identifies a
...