CAS protocol attribute release

[Kevin Foote]

> On Feb 22, 2016, at 5:08 PM, Andrew Morgan <morgan at orst.edu> wrote:
> 
> On Mon, 22 Feb 2016, Walter Forbes Hoehn (wassa) wrote:
> 
>> You use the standard attribute filter (attribute-filter.xml). The only tricky bit is that the “attribute requester” can vary depending on the configuration of the CAS client. In that case, you’ll need to do something like this:
>> 
>> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterRegex" regex="^https://foo.test.edu/.*$" />
> 
> How does that work if I have SAML entityIDs that match the regex?  I have a CAS service entry for all of OSU, like this:
> 
>  ^https?://([a-z0-9_-]+\.)*oregonstate\.edu/
> 
> but that regex would also match some SAML entityIDs (that are not CAS services).  Is there a way to apply the match for only CAS services? Maybe the group-id that someone else mentioned?

Yes my group suggestion works just tested.  You can match on the p:group name you define in the ServiceDefinition bean.

<afp:PolicyRequirementRule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="uolocal-cas-services" />

--------
thanks
 kevin.foote