using the saml:RegistrationAuthority policy rule

[Tom Scavo]

On Sun, Mar 22, 2015 at 1:59 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 3/22/15, 11:25 AM, "Tom Scavo" <trscavo at gmail.com> wrote:
>
>>I believe the following works in V2 with Rod's plugin installed:
>>
>><afp:AttributeFilterPolicy id="releaseRandSBundleToMyFederationSPs">
>>
>>  <afp:PolicyRequirementRule xsi:type="basic:AND">
>>    <basic:Rule xsi:type="saml:AttributeRequesterEntityAttributeExactMatch"
>>        attributeName="http://macedir.org/entity-category"
>>        attributeValue="http://refeds.org/category/research-and-scholarship"/>
>>    <basic:Rule xsi:type="mdrpif:AttributeRequesterRegistrationAuthority"
>>        registrars="http://my.federation.org"/>
>>  </afp:PolicyRequirementRule>
>>
>>  <!-- attribute rules here -->
>>
>></afp:AttributeFilterPolicy>
>>
>>Can you show me how to do the same thing in V3?
>
> The xsi:type is saml:RegistrationAuthority.

Okay, thanks. Does it support a space-separated list of registrar IDs as well?

For the archives:

<afp:AttributeFilterPolicy id="releaseRandSBundleToMyFederationSPs">

  <afp:PolicyRequirementRule xsi:type="basic:AND">
    <basic:Rule xsi:type="saml:AttributeRequesterEntityAttributeExactMatch"
        attributeName="http://macedir.org/entity-category"
        attributeValue="http://refeds.org/category/research-and-scholarship"/>
    <basic:Rule xsi:type="saml:RegistrationAuthority"
        registrars="http://my.federation.org"/>
  </afp:PolicyRequirementRule>

  <!-- attribute rules here -->

</afp:AttributeFilterPolicy>