idp.authn.Password.matchExpression

[Wessel, Keith]

Hi, all,

The wiki is a bit vague on this property in authn.properties and the matchExpression properties for other authn flows. Is this just an expression that the IdP will match against, or can I use it to do removal/addition of components? For instance, if I do:

idp.authn.Password.matchExpression = ^(.+)@example\.org$

Will the IdP automatically keep the parenthesized part of the expression and throw away the rest?

I'm used to the format such as the bean in password-authn-config.xml where I define the first and second parts of the replacement, but I'm not sure if this property can be used in place of that or if it's just a string to match against to say "a valid username looks like this".

Thanks,
Keith