Overview
The AttributeRequesterRegex
is a PolicyRule which returns true if the entityID of the party requesting the attributes (usually the SP) matches the supplied Java regular expression.
Schema Name
The AttributeRequesterRegex
type is defined by the urn:mace:shibboleth:2.0:afp
schema, which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd.
Prior to release 3.2.0 the basic:AttributeRequesterRegex
type is defined by the urn:mace:shibboleth:2.0:afp:mf:basic
schema, which can be located at http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd.
Use of that namespace is deprecated, but is supported.
Attributes
Only one attribute may be specified
regex
: a required attribute which specifies the java regular expression to match against
Child Elements
None
Example
<PolicyRequirementRule xsi:type="AttributeRequesterRegex" regex="^https://sp.example.org.*$" />