modularize attribute bundles in an AttributeFilterPolicy?
Rod Widdowson
rdw at steadingsoftware.com
Fri Feb 26 04:43:50 EST 2016
> Is there a way to make and IdP AttributeFilterPolicy more modular by
> defining a named attribute bundle and then incorporating and possibly
> supplementing it in a particular AttributeFilterPolicy?
I see exactly what you mean (and why) but No.
The (implied) namespaces for attributes are already complicated enough that
I wouldn't want to add them.
For completeness I'll mention that the attribute filter language does have
hooks to allow PolicyRequirementRules to be shared, but it was only (badly
&) partially implemented in V2 and we have withdrawn support in V3 (it turns
out that the semantics become almost impossible).
So I'm afraid that cut & paste is your friend.
If you feel strongly you could pop in an RFE to make PolicyRequirementRef
work. But it may well be a breaking change (at the edges) and so that would
need to wait for 4.0.
Rod
More information about the users
mailing list