The Shibboleth IdP V4 software will leave support on September 1, 2024.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 9 Current »

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The ValueRegex type matches attributes values against the supplied Pattern

The ValueRegex type can be a Matcher or a PolicyRequirement.

  • If no attributeID attribute is specified then it is a Matcher (returning matching values from the filtered attribute, and the empty set otherwise).

  • If an attributeID attribute is specified then it is a PolicyRule (returning true if a matching value is present amongst the values for the specified attribute).

Reference

Examples

Apply this rule if the attribute "uid" contains at least one value which starts with "hn":

Simple Profile Policy
<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/>

Add any values of the attribute "uid" with start "hn" to its permitted values list:

Simple Matcher
<AttributeRule attributeID="uid">
   <PermitValueRule xsi:type="ValueRegex" regex="^hn.*$" />
</AttributeRule>

Apply this rule if any attribute contains a value which starts with hn:

Compound PolicyRule (deprecated)
<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$"/>

If the attribute "uid" contains any value which starts hn then release all values of "email":

Compound Matcher (deprecated)
<AttributeRule attributeID="email">
   <PermitValueRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/>
</AttributeRule>

  • No labels