CAS protocol attribute release

[Andrew Morgan]

On Mon, 22 Feb 2016, Walter Forbes Hoehn (wassa) wrote:

> You use the standard attribute filter (attribute-filter.xml). The only 
> tricky bit is that the “attribute requester” can vary depending on the 
> configuration of the CAS client. In that case, you’ll need to do 
> something like this:
>
> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterRegex" 
> regex="^https://foo.test.edu/.*$" />

How does that work if I have SAML entityIDs that match the regex?  I have 
a CAS service entry for all of OSU, like this:

   ^https?://([a-z0-9_-]+\.)*oregonstate\.edu/

but that regex would also match some SAML entityIDs (that are not CAS 
services).  Is there a way to apply the match for only CAS services? 
Maybe the group-id that someone else mentioned?

Thanks,
 	Andy