Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd
The Value
type compares attributes values against the supplied string.
This type can be a Matcher or a PolicyRule.
If no attributeID
attribute is specified then it is a Matcher (returning that value if it is present amongst the values of the attribute being filtered, and the empty set otherwise).
If an attributeID
attribute is specified then it is a PolicyRule (returning true if that that is present amongst the values for the specified attribute).
|
Apply this rule if the attribute "uid" contains a value "jsmith":
<PolicyRequirementRule xsi:type="Value" value="jsmith" attributeID="uid"/> |
If the attribute "uid" contains the value "jsmith" then add "jsmith to the permitted values to be release for "uid":
<AttributeRule attributeID="uid"> <PermitValueRule xsi:type="Value" value="jsmith" caseSensitive="false" /> </AttributeRule> |
Apply this rule if any attribute contains a value "jsmith":
<PolicyRequirementRule xsi:type="Value" value="jsmith"/> |
If the attribute "uid" contains the value "jsmith" then release all values of "email":
<AttributeRule attributeID="email"> <PermitValueRule xsi:type="Value" value="jsmith" caseSensitive="false" attributeID="uid"/> </AttributeRule> |