A <PolicyRequirementRule> defines the circumstances under which an <AttributeFilterPolicy> is applicable to a request.
If a <PolicyRequirementRule> evaluates to true, then all the <AttributeRule> elements of the containing <AttributeFilterPolicy> are evaluated.
The actual behavior of this element is defined by the xsi:type of the element. Any of the Common Types can be specified, but it is more usual that a PolicyRule is specified.
If a Matcher is specified, then it is converted into a PolicyRequirement rule as described here.
Attributes and child elements are as defined for the specific type.
The element itself is defined within the urn:mace:shibboleth:2.0:afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd
The actual plugin types used are defined in namespaces specific to those types (though in practice they are now defined within the same namespace, or a pair of legacy namespaces in older versions, as described throughout this documentation).
<PolicyRequirementRule xsi:type="Requester" value="https://sp.example.org" /> |