Shibboleth SP - RequestMap requireSession false for query string value

[Miller, Don (donm@uidaho.edu)]

I am currently using the RequestMapper to limit access to certain parts of an application based on query string but I was wondering how to not require a session at all if a specific query value is used.

Here is the example from the documentation requiring a session and limiting id=internal.* to specific affiliation claims.

<RequestMap applicationId="default">
    <Host name="www.example.org">
        <Path name="doku.php" authType="shibboleth" requireSession="true">
            <Query name="id" regex="^internal.*">
                <AccessControl>
                        <Rule require="affiliation">faculty at osu.edu student at osu.edu</Rule>
                </AccessControl>
            </Query>
        </Path>
    </Host>
</RequestMap>

Is it possible to not require the session at all? Possibly like this, similar to excluding a sub path from a session?

<RequestMap applicationId="default">
    <Host name="www.example.org">
        <Path name="doku.php" authType="shibboleth" requireSession="true">
            <Query name="id" regex="^public.*" requireSession="false"/>
        </Path>
    </Host>
</RequestMap>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140206/a110aff8/attachment.html