The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.
PolicyRequirementRuleConfiguration
- Rod Widdowson
- Scott Cantor
Overview
A <PolicyRequirementRule> defines the circumstances under which an <AttributeFilterPolicy>Â is applicable to a request.
If a <PolicyRequirementRule> evaluates to true, then all the <AttributeRule> elements of the containing <AttributeFilterPolicy> are evaluated.
The actual behavior of this element is defined by the xsi:type of the element. Any of the Common Types can be specified, but it is more usual that a PolicyRule is specified.
If a Matcher is specified, then it is converted into a PolicyRequirement rule as described here.
Attributes and child elements are as defined for the specific type.
Schema Name and Location
The element itself is defined within the urn:mace:shibboleth:2.0:afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd
The actual plugin types used are defined in namespaces specific to those types (though in practice they are now defined within the same namespace, or a pair of legacy namespaces in older versions, as described throughout this documentation).
Example
<PolicyRequirementRule xsi:type="Requester" value="https://sp.example.org" />