Restrict attribute values based on SP entity?

[Cantor, Scott]

> I need to restrict entity1 to only send "abc", while entity2 can only
> send "xyz", and be scalable up to entity3, 4, etc...

I don't really think it scales to create rules for every case, that would normally be something you'd handle with a database and a table-driven set of rules in an application. It certainly depends how many there are.

> I've run across the NativeSPAttributeFilter page which points to using
> <AttributeFilter>, but the documentation is light there.

It's light because the feature is virtually unused, and I don't have time to document a system that's that complex when nobody's using it.

What you need is a seperate policy with a PolicyRequirementRule based on the issuer for each case, and then an attribute rule for the attribute that specifies only the intended value.

-- Scott