The Shibboleth IdP V3 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP4 wiki space for current documentation on the supported version.

NumberOfAttributeValuesConfiguration

Overview

The NumberOfAttributeValues type (basic:NumberOfAttributeValues prior to V3.2) is a PolicyRule which returns true If the number of values for the specified attribute falls between specific limits. This can be used for sanity checking of results, for instance to refuse to release any values if not all possible values are present.

Schema Name

The NumberOfAttributeValues type is defined in the urn:mace:shibboleth:2.0:afp namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp.xsd

The deprecated basic:NumberOfAttributeValues type is defined in the urn:mace:shibboleth:2.0:afp:mf:basic namespace, the schema for which can be located at http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd

Attributes

Three attributes must be specified:

NameTypeDefaultDescription
attibuteID
StringRequiredThe name of the attribute whose values are to be counted
minimum
Positive (>=0) IntegerRequiredThe minimum number of values allowed
maximum
Positive (>=0) IntegerRequiredThe minimum number of values allowed

The policy returns true iff the number of values is >= 'minimum' and  the number of values is  <= 'maximum'.

Child Elements

None

Example

<PolicyRequirementRule xsi:type="NumberOfAttributeValues" attributeID="uid" minimum="1" maximum="3"/>
Apply this rule if the atteibute "uid" has 1, two or 3 attribute values, otherwise not.