Attribute filter

[Cantor, Scott]

On 6/24/14, 9:12 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>
>As deployed in V2 (and despite the class name), the AttributeInMetadata
>filter can only be used as a Value filter (it is the only filter with this
>restriction), which means that it inherits the attribute it is interested
>in
>from the enclosing <AttributeRule>.

I think that was because it's problematic to know what the name in
metadata is when all you have is the internal ID, but I probably was just
being lazy.

>I'd like to extend the syntax for this filter to allow an optional
>"attributeID", then we look towards say something like
>
><afp:PolicyRequirementRule xsi:type="saml:EntityAttributeInMetadata"
>attributeID="EntityCategory"/>
>
>As an advanced replacement for
>
><afp:PolicyRequirementRule
>xsi:type="saml:AttributeRequesterEntityAttributeExactMatch"
> 
>attributeName="AttributeRequesterEntityAttributeExactMatch " />
>
>thoughts?

As long as we have a reasonable way to figure out the SAML attribute name
to look for.

-- Scott