[JIRA] (IDP-1904) Additional policy rules for attribute filter

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/IDP-1904?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 ) IDP-1904 ( https://shibboleth.atlassian.net/browse/IDP-1904?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 ) Additional policy rules for attribute filter ( https://shibboleth.atlassian.net/browse/IDP-1904?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 )

Issue Type: New Feature Assignee: Rod Widdowson ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=59fb32bbc24efb3c4ed3c977 ) Components: Attribute Filter Created: 09/Feb/22 2:04 PM Fix Versions: 4.2.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

Identified a couple of additional policy rules I think we want to add to support the new OP plugin use cases, but they’re generic.

One would be a match on profile URI. I think some kind of protocol family identifier would be more useful, but for now it’s probably good enough, I think 99% of SAML would be the 2.0 SSO profile and 99% of OAuth/OIDC would just be the token profile anyway.

The other is a switch on whether the requester is verified or not, per the relying party context. We may have to extend the filter context for that, I’m not sure we want to do more work to have it walk into the tree to find the flag dynamically.

( https://shibboleth.atlassian.net/browse/IDP-1904#add-comment?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1904#add-comment?atlOrigin=eyJpIjoiZjdiMmI3MDFhZDZmNDM4M2FhNGM4MzVlY2YzMTFjMjIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100191- sha1:993dea2 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220209/46275bcd/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-8d48ef07-e8b9-46b0-b10b-ca12a2e73d5d
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220209/46275bcd/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-88f2b2a3-7e0b-45b7-ae48-d12471e02b4f
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220209/46275bcd/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-a8c8b2c6-b08d-41de-821e-5f158ffecb70
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220209/46275bcd/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-13e3aabc-3ab2-4647-bf99-9403ba1ec0c8
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220209/46275bcd/attachment-0007.png>