ValueRegexConfiguration

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The ValueRegex type matches attributes values against the supplied Pattern

The ValueRegex type can be a Matcher or a PolicyRequirement.

If no attributeID attribute is specified then it is a Matcher (returning matching values from the filtered attribute, and the empty set otherwise).
If an attributeID attribute is specified then it is a PolicyRule (returning true if a matching value is present amongst the values for the specified attribute).

Name	Type	Default	Description

Name	Type	Default	Description
attributeID	String		If this is present, then this is a PolicyRule returning true if the corresponding attribute exists and contains a value that matches. If this is not present, then this is a Matcher returning any value that matches, and the empty set otherwise.
regex	Pattern		The Java regular expression to match against
caseSensitive	boolean	true	Whether the comparison is case sensitive

Apply this rule if the attribute "uid" contains at least one value which starts with "hn":

<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$" attributeID="uid"/>

Add any values of the attribute "uid" with start "hn" to its permitted values list:

<AttributeRule attributeID="uid">
   <PermitValueRule xsi:type="ValueRegex" regex="^hn.*$" />
</AttributeRule>

Apply this rule if any attribute contains a value which starts with hn:

<PolicyRequirementRule xsi:type="ValueRegex" regex="^hn.*$"/>

If the attribute "uid" contains any value which starts hn then release all values of "email":