AttributeDefinition multivalued to single value attribute?

[Baron Fujimoto]

On Fri, Jun 08, 2018 at 09:18:21PM +0000, Cantor, Scott wrote:
>> This appears to work, but it's not clear how you would do this in a non-
>> deprecated manner.
>
>I don't know what's deprecated about it but if it doesn't WARN about something, I imagine the documentation isn't right.

It doesn't appear to log any warnings or errors (at least for 3.2.1),
using an AttributeRule based on the documentation example (marked as
deprecated) for a Compound matcher at

<https://wiki.shibboleth.net/confluence/display/IDP30/ValueConfiguration>

E.g.:

<afp:AttributeRule attributeID="bar">
    <afp:PermitValueRule xsi:type="afp:Value" value="true" attributeID="hasFoo" ignoreCase="true" />
</afp:AttributeRule>

The documentation states:

* If no attributeID attribute is specified then it is a Matcher ...
* If an attributeID attribute is specified then it is a PolicyRule ...

I'm specifying attributeIDs, which by the docs makes it a PolicyRule but
I believe I'm using it as a Matcher?

-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum