Using isMemberof Attribute to release specific group membership

[Cantor, Scott]

On 3/30/16, 4:27 PM, "users on behalf of Michael Richter" <users-bounces at shibboleth.net on behalf of mrichter at coastal.edu> wrote:



>Ok,  I’m on my way.  I’m using the PolicyRequriementRule to require the requester and that the memberof attribute contain the group needed.  Now to finish, I’ll need to set up another AttributeFilter Policy which is fine, but is it possible to use both ANDs and NOT in A PolicyRequirementRule?

Yes, it's all just a nested syntax. ANDs and ORs take any number of children, NOTs take one.

-- Scott