Are EntityIDs wildcardable in any of the configuration files?

Christopher Bongaarts cab at umn.edu
Tue Oct 15 11:23:24 EDT 2013


On 10/15/2013 9:57 AM, Kevin P. Foote wrote:
> On Tue, 15 Oct 2013, Martin, Andrew J. wrote:
>
>> >It would be useful to be able to "match" an EntityID pattern for things like attribute release, rather than have them each listed out separately (which requires a lot of modification when our SalesForce EntityIDs change for upgrades, etc).
>> >
> Create a release that contains all the entityIds for your salesforce
> versions. You can use a <PolicyRequirementRule xsi:type="basic:OR"> for
> such a release. And add the entityId(s) via the
> basic:AttributeRequesterString...

Another technique we've used for this is to wrap the metadata for 
related entities in an EntitiesDescriptor, give it a Name attribute, and 
then use that as the id for RelyingParty, or as an 
AttributeRequesterInEntityGroup policy requirement rule.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%



More information about the users mailing list