Attribute File - REGEX

[Hugo Slavia]

The following REGEX is permissive --- releases all 'memberOf' values to the
SP -- as it is multi-valued (irrespective if group is in the 2 OUs listed).

Under OUs 'xxxx' and 'yyyy' -- there are 100s of groups --- so not
practical to list each group name in the 'attribute-filter'.

Would a REGEX maven be able to provide hint on appropriate REGEX to release
only groups under the respective OU 'xxxx,foobar' and 'yyy,foobar'?



 <AttributeRule attributeID="memberOf">

  <PermitValueRule xsi:type="OR">

            <Rule xsi:type="ValueRegex" attributeID="groupMembership" regex=
"^(.*?)ou=xxxx,foobar" />

            <Rule xsi:type="ValueRegex" attributeID="groupMembership" regex=
"^(.*?)ou=yyy,foobar" />

              </PermitValueRule>

        </AttributeRule>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190206/ce8dbd8b/attachment.html>