How to setup rules based on attribute values

[Peter Schober]

* nr673 . <nara.rama.us at gmail.com> [2015-06-18 07:39]:
> I want to enforce a rule in such a way that the email address of the users
> authenticated through OKTA1 must have @abc.com as their domain address and
> OKTA2 users must have @xyz.com as the domain address.
> 
> Is it possible to enforce this rule? If the email attribute does not follow
> the rule, can we reject the incoming request?
> 
> If yes, can you please give me some documentation or example on how to
> proceed on this?

Have a look at your SP's attribute-policy.xml and then consult the
IDP's (!) attribute filter language documentation from IDPv2, as
that's essentially the same thing. Ask concrete questions here if you
can't get it to work.
-peter