Using isMemberof Attribute to release specific group membership

[Cantor, Scott]

On 3/30/16, 3:06 PM, "users on behalf of Michael Richter" <users-bounces at shibboleth.net on behalf of mrichter at coastal.edu> wrote:



>So something more like this:
>
><PolicyRequirementRule xsi:type="AND">
>			<Rule xsi:type="Requester" value="https://e5.onthehub.com" />
>			<Rule xsi:type="AttributeValueString" attributeID="isMemberOf" value="CN=Staff,OU=Groups,DC=coastal"/>
>        </PolicyRequirementRule>
>
> 
>When I try to start the IDP I get:
>Cannot resolve 'AttributeValueString' to a type definition for element 'Rule'

Because you're using the 3.2+ collapsed namespace, and the rule name there is just "Value" IIRC. The docs were all updated to reflect the updated names.

-- Scott