Are EntityIDs wildcardable in any of the configuration files?
Christopher Bongaarts
cab at umn.edu
Tue Oct 15 11:23:24 EDT 2013
On 10/15/2013 9:57 AM, Kevin P. Foote wrote:
> On Tue, 15 Oct 2013, Martin, Andrew J. wrote:
>
>> >It would be useful to be able to "match" an EntityID pattern for things like attribute release, rather than have them each listed out separately (which requires a lot of modification when our SalesForce EntityIDs change for upgrades, etc).
>> >
> Create a release that contains all the entityIds for your salesforce
> versions. You can use a <PolicyRequirementRule xsi:type="basic:OR"> for
> such a release. And add the entityId(s) via the
> basic:AttributeRequesterString...
Another technique we've used for this is to wrap the metadata for
related entities in an EntitiesDescriptor, give it a Name attribute, and
then use that as the id for RelyingParty, or as an
AttributeRequesterInEntityGroup policy requirement rule.
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%
More information about the users
mailing list