The Shibboleth IdP V4 software has reached its End of Life and is no longer supported. This documentation is available for historical purposes only. See the IDP5 wiki space for current documentation on the supported version.

NumberOfAttributeValuesConfiguration

Namespace: urn:mace:shibboleth:2.0:afp
Schema: http://shibboleth.net/schema/idp/shibboleth-afp.xsd

Overview

The NumberOfAttributeValues type is a PolicyRule which returns true If the number of values for the specified attribute falls between specific limits. This can be used for sanity checking of results, for instance to refuse to release any values if not all possible values are present.

Reference

XML Attributes

Name

Type

Required?

Description

Name

Type

Required?

Description

attibuteID

String

Y

The name of the attribute whose values are to be counted

minimum

Non-negative (>=0) Integer

Y

The minimum number of values allowed

maximum

Non-negative (>=0) Integer

Y

The maximum number of values allowed

The policy returns true iff the number of values is >= 'minimum' and  the number of values is  <= 'maximum'.

Example

Apply this rule if the attribute "uid" has 1, two or 3 attribute values, otherwise not:

<PolicyRequirementRule xsi:type="NumberOfAttributeValues" attributeID="uid" minimum="1" maximum="3"/>