Overview

A <PolicyRequirementRule> defines the circumstances under which an <AttributeFilterPolicy> is applicable to a request.

If a <PolicyRequirementRule> evaluates to true, then all the <AttributeRule> elements of the containing <AttributeFilterPolicy> are evaluated.

The actual behavior of this element is defined by the xsi:type of the element. Any of the Common Types can be specified, but it is more usual that a PolicyRule is specified.

If a Matcher is specified, then it is converted into a PolicyRequirement rule as described here.

Attributes and child elements are as defined for the specific type.

Schema Name and Location

The element itself is defined within the urn:mace:shibboleth:2.0:afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd

The actual plugin types used are defined in namespaces specific to those types (though in practice they are now defined within the same namespace, or a pair of legacy namespaces in older versions, as described throughout this documentation).

Example

 <PolicyRequirementRule xsi:type="Requester" value="https://sp.example.org" />

Browser not supported