modularize attribute bundles in an AttributeFilterPolicy?

Rod Widdowson rdw at steadingsoftware.com
Fri Feb 26 04:43:50 EST 2016


> Is there a way to make and IdP AttributeFilterPolicy more modular by
> defining a named attribute bundle and then incorporating and possibly
> supplementing it in a particular AttributeFilterPolicy? 

I see exactly what you mean (and why) but No.

The (implied) namespaces for attributes are already complicated enough that
I wouldn't want to add them.

For completeness I'll mention that the attribute filter language does have
hooks to allow PolicyRequirementRules to be shared, but it was only (badly
&) partially implemented in V2 and we have withdrawn support in V3 (it turns
out that the semantics become almost impossible).

So I'm afraid that cut & paste is your friend.

If you feel strongly you could pop in an RFE to make PolicyRequirementRef
work.  But it may well be a breaking change (at the edges) and so that would
need to wait for 4.0.

Rod



More information about the users mailing list