using samlP:requesterID

[Cantor, Scott]

> I'd like to build an attribute release policy based upon the value presented in
> the samlP:RequesterID attribute of the AuthnRequest in a proxy scenario;
> i.e. if samlP:RequesterID = https://proxiedsp.anywhere.com/shibboleth
> release emailAddress.

Your choices are Java extension or the Script match functor, basically.

I've never heard of anybody populating that element, but assuming it were, you'd have to dig through the API to get at the incoming message and interrogate it directly.

-- Scott