/
RegistrationAuthorityConfiguration
The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.
RegistrationAuthorityConfiguration
Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd
Overview
The RegistrationAuthority
type is a PolicyRule that returns true if the attribute recipient is registered by a particular registrar or one of a set of registrars. Matching occurs against the RegistrationAuthority
XML attribute value on the <mdrpi:RegistrationInfo>
element (if any).
Reference
Example
Apply this rule if the SP is a REFEDS Research & Scholarship service registered by MyFederation with the given registrar ID:
<PolicyRequirementRule xsi:type="AND">
<Rule xsi:type="EntityAttributeExactMatch"
attributeName="http://macedir.org/entity-category"
attributeValue="http://refeds.org/category/research-and-scholarship"/>
<Rule xsi:type="RegistrationAuthority" registrars="http://my.federation.org"/>
</PolicyRequirementRule>
, multiple selections available,
Related content
EntityAttributeExactMatchConfiguration
EntityAttributeExactMatchConfiguration
More like this
AttributeRuleConfiguration
AttributeRuleConfiguration
Read with this
RegistrationAuthorityConfiguration
RegistrationAuthorityConfiguration
More like this
RequesterConfiguration
RequesterConfiguration
Read with this
RegistrationAuthorityConfiguration
RegistrationAuthorityConfiguration
More like this
EntityAttributeRegexMatchConfiguration
EntityAttributeRegexMatchConfiguration
Read with this