Overview
The IssuerRegex is a PolicyRule which returns true if the entityID of the party issuing the attributes (usually, but not always, the IdP itself) matches the supplied Java regular expression.
The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.
Schema Name
The IssuerRegex type is defined in the urn:mace:shibboleth:2.0:afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd
Attributes
| Name | Type | Required? | Description |
|---|---|---|---|
| Pattern | Y | Specifies the java regular expression to match against. |
Child Elements
None
Example
<PolicyRequirementRule xsi:type="IssuerRegex" regex="^https://idp\.example\.org/.*$" />
Apply this rule if the IdP entityID starts with "https://idp.example.org/".