Versions Compared

Version Old Version 1 New Version Current
Changes made by

Scott Cantor

Scott Cantor

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note

This feature required V4.2 and above.

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

...

Specifying the attributeNameFormat attribute in the rule will constrain the rule to match only against the underlying XML representation of the extension data. Omitting it will permit the rule to match against the data mapped from the XML via the AttributeRegistryConfiguration, which increases efficiency.

The notion of a “proxied requester” varies by profile/protocol/use case, and generally does not involve metadata. This rule can be applied in cases where metadata may be available (and is actually being accessed).

Reference

Expand
titleXML Attributes

Name

Type

Required?

Default

Description

attributeName

String

Y

The SAML Attribute Name to match against

attributeValueRegex

Pattern

Y

The regular expression to match against

attributeNameFormat

URI

The SAML Attribute NameFormat to test against (if not specified, then matching is solely based on the Name)

ignoreUnmappedEntityAttributes

Boolean

false

When true, this constrains the rule to ignore the underlying XML and match solely against the data mapped via the AttributeRegistryConfiguration

Example

The above policy would match the tags in the metadata below:

...