Google Apps using Shibboleth

[Christopher Bongaarts]

On 12/3/2012 12:15 PM, Prasanna wrote:
> Dear Chris/Paul,
>
> I made changes as you mentioned....Please find the changes below,

Getting closer.  Your AttributeFilterPolicies need unique IDs, or the 
second will make the first one inoperative.  The id can be whatever you 
like; it is only used internal to the IdP.

> *Attribute filter*
>
> <afp:AttributeFilterPolicy id="google.com/a/imperoidm.com">
>           <afp:PolicyRequirementRule
> xsi:type="basic:AttributeRequesterString" value="google.com/a/imperoidm.com"
> />
>           <afp:AttributeRule attributeID="principal">
>               <afp:PermitValueRule xsi:type="basic:ANY" />
>           </afp:AttributeRule>
> </afp:AttributeFilterPolicy>
>
>
>
> <afp:AttributeFilterPolicy id="google.com/a/imperoidm.com">
>           <afp:PolicyRequirementRule xsi:type="basic:NOT">
>                   <basic:Rule xsi:type="basic:AttributeRequesterString"
> value="google.com/a/imperoidm.com" />
>           </afp:PolicyRequirementRule>
>           <afp:AttributeRule attributeID="transientId">
>               <afp:PermitValueRule xsi:type="basic:ANY" />
>           </afp:AttributeRule>
> </afp:AttributeFilterPolicy>


-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%