The Shibboleth IdP V4 software will leave support on September 1, 2024.

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 11 Current »

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The Value type compares attributes values against the supplied string.

This type can be a Matcher or a PolicyRule.

  • If no attributeID attribute is specified then it is a Matcher (returning that value if it is present amongst the values of the attribute being filtered, and the empty set otherwise).

  • If an attributeID attribute is specified then it is a PolicyRule (returning true if that that is present amongst the values for the specified attribute).

Reference

Examples

Apply this rule if the attribute "uid" contains a value "jsmith":

Simple Profile Policy
<PolicyRequirementRule xsi:type="Value" value="jsmith" attributeID="uid"/>

If the attribute "uid" contains the value "jsmith" then add "jsmith to the permitted values to be release for "uid":

Simple Matcher
<AttributeRule attributeID="uid">
   <PermitValueRule xsi:type="Value" value="jsmith" caseSensitive="false" />
</AttributeRule>

Apply this rule if any attribute contains a value "jsmith":

Compound PolicyRule (deprecated)
<PolicyRequirementRule xsi:type="Value" value="jsmith"/>

If the attribute "uid" contains the value "jsmith" then release all values of "email":

Compound Matcher (deprecated)
<AttributeRule attributeID="email">
   <PermitValueRule xsi:type="Value" value="jsmith" caseSensitive="false" attributeID="uid"/>
</AttributeRule>

  • No labels