The Shibboleth IdP V4 software will leave support on September 1, 2024.

IssuerRegexConfiguration

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The IssuerRegex type is a PolicyRule which returns true if the entityID of the party issuing the attributes matches the supplied Pattern.

The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.

Reference

XML Attributes

Name

Type

Default

Description

Name

Type

Default

Description

regex

Pattern

 

Required, the Java regular expression to match against

caseSensitive

boolean

true

Whether the comparison is case sensitive

Example

Apply this rule if the IdP entityID starts with "https://idp.example.org/":

<PolicyRequirementRule xsi:type="IssuerRegex" regex="^https://idp\.example\.org/.*$" />