The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.
IssuerConfiguration
- Scott Cantor
- Rod Widdowson
Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd
Overview
The Issuer type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system issuing the attributes matches a supplied string.
The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.
Reference
XML Attributes
Name | Type | Default | Description |
|---|---|---|---|
value | String |
| Required, the string to match against |
caseSensitive | Boolean | true | Optional, specifies how to perform the comparison |
Example
The example reads "Apply this rule if the attribute issuer is named 'https://idp.example.org'".
<PolicyRequirementRule xsi:type="Issuer" value="https://idp.example.org" />