Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd
The ValueRegex
type matches attributes values against the supplied Pattern
The ValueRegex
type can be a Matcher or a PolicyRequirement.
If no attributeID
attribute is specified then it is a Matcher (returning matching values from the filtered attribute, and the empty set otherwise).
If an attributeID
attribute is specified then it is a PolicyRule (returning true if a matching value is present amongst the values for the specified attribute).
|
Apply this rule if the attribute "uid" contains at least one value which starts with "hn":
<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/> |
Add any values of the attribute "uid" with start "hn" to its permitted values list:
<AttributeRule attributeID="uid"> <PermitValueRule xsi:type="ValueRegex" regex="^hn.*$" /> </AttributeRule> |
Apply this rule if any attribute contains a value which starts with hn:
<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$"/> |
If the attribute "uid" contains any value which starts hn then release all values of "email":
<AttributeRule attributeID="email"> <PermitValueRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/> </AttributeRule> |