SP-side attribute filtering based on IdP EntityID

Peter Schober peter.schober at univie.ac.at
Mon Jun 29 12:33:50 EDT 2015


* Izz Abdullah <izz.abdullah at wepanow.com> [2015-06-29 18:11]:
> We are running Shibboleth 2.5.4 and purely as an SP.  I was looking
> to filter which attributes to process based on a specific IdP
> entityID using something similar to the Attribute Filters in which
> an IdP would send to a given SP, in a "simpler" manner than using
> post-processing hooks.  Can this be achieved with rules by
> attribute-policy or similar?

Yes, it's the same language. Where the IDP referenes an SP in a
"basic:AttributeRequesterString" rule, the SP references an IDP in a
"basic:AttributeIssuerString" rule.
-peter


More information about the users mailing list