Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd
Overview
The Issuer type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system issuing the attributes matches a supplied string.
The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.
Reference
XML Attributes
Name | Type | Default | Description |
|---|---|---|---|
value | String | Required, the string to match against | |
caseSensitive | Boolean | true | Optional, specifies how to perform the comparison |
Example
The example reads "Apply this rule if the attribute issuer is named 'https://idp.example.org'".
<PolicyRequirementRule xsi:type="Issuer" value="https://idp.example.org" />