SV: Attribute Filter policy. Where am I going wrong?
Cantor, Scott
cantor.2 at osu.edu
Wed Jul 29 14:23:17 EDT 2015
On 7/29/15, 2:21 PM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:
>
>Jfyi, back when I was managing a largish IDP deployment I commonly
>structured rules with an OR even if there was only only relevant SP at
>that time, since inevitably another one would come along later, at
>which point I would have had to rewrite that rule.
>So I always added another entityID (that of a test SP or just a dummy
>value) to satisfy the syntactical OR requirement of 2 child elements
>but without having to rewrite the rule when it should apply to more
>than 1 entity (vs. 1 exactly).
We might be able to enhance the syntax to handle a single child (which we should have done to start with) because it's a backward-compatible change (more to less strict). Feel free to file an RFE. If Rod wants to shoot me for suggesting that, he can.
-- Scott
More information about the users
mailing list