[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/conf/attribute-filter.xml

[noreply at shibboleth.net]

Author: scantor
Date: Wed Jun 25 18:03:56 2014
New Revision: 6174

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6174&view=rev
Log:
Tweak default policy.

Modified:
    trunk/idp-conf/src/main/resources/conf/attribute-filter.xml

Modified: trunk/idp-conf/src/main/resources/conf/attribute-filter.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/attribute-filter.xml?rev=6174&r1=6173&r2=6174&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/attribute-filter.xml (original)
+++ trunk/idp-conf/src/main/resources/conf/attribute-filter.xml Wed Jun 25 18:03:56 2014
@@ -3,8 +3,7 @@
     This file is an EXAMPLE policy file.  While the policy presented in this 
     example file is functional, it isn't very interesting.
     
-    Deployers should refer to the Shibboleth 2 documentation for a complete list of components 
-    and their options.
+    Deployers should refer to the documentation for a complete list of components and their options.
 -->
 <afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
         xmlns:afp="urn:mace:shibboleth:2.0:afp"
@@ -25,9 +24,9 @@
 
     </afp:AttributeFilterPolicy>
     
-    <!-- TODO Remove and replace releasing anything to anyone -->
+    <!-- TODO: Example policy for testbed and unit tests, remove before final -->
     <afp:AttributeFilterPolicy id="releaseSomeAttributeToAnyone">
-        <afp:PolicyRequirementRule xsi:type="basic:ANY" />
+        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://sp.example.org" />
 
         <afp:AttributeRule attributeID="eduPersonAffiliation">
             <afp:PermitValueRule xsi:type="basic:ANY" />