The Shibboleth IdP V4 software will leave support on September 1, 2024.

IssuerConfiguration

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The Issuer type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system issuing the attributes matches a supplied string.

The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.

Reference

XML Attributes

Name

Type

Default

Description

Name

Type

Default

Description

value

String

 

Required, the string to match against

caseSensitive

Boolean

true

Optional, specifies how to perform the comparison

Example

The example reads "Apply this rule if the attribute issuer is named 'https://idp.example.org'".

<PolicyRequirementRule xsi:type="Issuer" value="https://idp.example.org" />