The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

IssuerRegexConfiguration

Owned by Scott Cantor
Last updated: Sept 29, 2021 by Rod Widdowson
1 min read

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The IssuerRegex type is a PolicyRule which returns true if the entityID of the party issuing the attributes matches the supplied Pattern.

The primary use case for this is proxying when filtering inbound attributes, or in "multi-homing" scenarios in which the IdP may be representing multiple sources of attributes itself under different names.

Reference

XML Attributes

Name

Type

Default

Description

Name

Type

Default

Description

regex

Pattern

 

Required, the Java regular expression to match against

caseSensitive

boolean

true

Whether the comparison is case sensitive

Example

Apply this rule if the IdP entityID starts with "https://idp.example.org/":

<PolicyRequirementRule xsi:type="IssuerRegex" regex="^https://idp\.example\.org/.*$" />