Is below Policy rule possible

Lalith Jayaweera ljayaweera at gmail.com
Sun Nov 12 23:13:19 EST 2017


sorted

<PolicyRequirementRule xsi:type="AND">

            <Rule xsi:type="Requester" value="https://xyz.com/access/
test/testn" />

            <Rule xsi:type="Value" value="Student" ignoreCase="true"
attributeID="testAttribute" />

        </PolicyRequirementRule>

On Mon, Nov 13, 2017 at 12:03 PM, Lalith Jayaweera <ljayaweera at gmail.com>
wrote:

> In the attribute-filter.xml I just coded below PolicyRequirementRule
>
>
> Basically the need is, pass uid, givenName, email to SP
> https://xyz.com/access/test/testn for students (when testAttribute
> contains value "Student")
>
>
>
> However it complains about a afftribute filer configuration issue, what
> exactly the issue in below code segment in PolicyRequirementRule?
>
>
> <AttributeFilterPolicy id="releaseAttributetoXYZ">
>
>
>
>         <PolicyRequirementRule xsi:type="AND">
>
>             <Rule xsi:type="Requester" value="https://xyz.com/access/
> test/testn" />
>
>             <Rule xsi:type="Value" value="Student" ignoreCase="true"
> attributeId="testAttribute" />
>
>         </PolicyRequirementRule>
>
>
>
>        <AttributeRule attributeID="uid">
>
>             <PermitValueRule xsi:type="ANY" />
>
>         </AttributeRule>
>
>  <AttributeRule attributeID="givenName">
>
>             <PermitValueRule xsi:type="ANY" />
>
>         </AttributeRule>
>
>
>
>
>         <AttributeRule attributeID="email">
>
>             <PermitValueRule xsi:type="ANY" />
>
>         </AttributeRule>
>
>
>
>  </AttributeFilterPolicy>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171113/a3a82b8b/attachment.html>


More information about the users mailing list