A chance to make changes to the AttributeFilter language Element names, and a request.

Rod Widdowson rdw at steadingsoftware.com
Mon Sep 7 12:52:19 EDT 2015


After our discussion on Friday, I looked at removing the need for the saml
and basic name spaces in an attribute filter definition.  IDP-808

It turns out that this is pretty simple so I have been ploughing through it.

I realized as I did this that this is the opportunity to remove (in the afp:
namespace) all those Element names we deprecated in V2
(AttributeIssuerAnything, AttributeRequesterInEntityGroup and so on), so I
have done that.  I have also removed all the (unsupported) code to parse
References in the Booleans.

However we also have the one-off opportunity to change the names of any of
the PolicyRules or Matchers which used to live in the saml: and basic:
namespace.

Are there any changes which we wish we had made 10 months ago but didn't?
If so now's a good time to say so.

And a related request:  If anybody would like to 

a) Review the afp schema as it now is
(idp-schema/src/resources/schema/shibboleth-afp.xsd)    and/or
b) Think about an xslt that will convert an old style (three namespace)
filter file to a new style (one namespace) one (ignoring the deprecated
functions)

I'd appreciate it.

/Rod



More information about the dev mailing list