AttributeFilterPolicy requester Value

Kevin Ratcliffe kratcliffe at
Wed Feb 12 09:39:36 EST 2020

Thanks for the reply Rod. That worked.

I very nearly tried that early in testing but read in the integration guide section of the Shibboleth wiki that "The Adobe service is provided via a SAML IdP/SP Proxy (Okta), it is the Okta SP that you are integrating with". The Adobe SSO docs and the integration guide both use a requester value in the form of "". I should have stuck to my original plan.

Three beers for Rod(next time you are in Salford, UK).

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at
Save Paper. Please consider the environment before printing.
-----Original Message-----
From: users <users-bounces at> On Behalf Of Rod Widdowson
Sent: 12 February 2020 11:43
To: 'Shib Users' <users at>
Subject: RE: AttributeFilterPolicy requester Value

> Is there a way that I can get the requester value for attribute-filter.xml from the IdP or is it easier to log a call with Adobe?

Absent any other unlikely weirdness in your configuration its the EntityID.

>>  The Requester type is a PolicyRule which returns true if the name (generally the SAML entityID) of the system
requesting/receiving the attributes (usually an SP) matches a supplied string.

For Consortium Member technical support, see
To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list