Exclude specific EntityID from attribute-match policy requirement rule?

[Cantor, Scott]

On 2/14/22, 7:52 PM, "users on behalf of Purcell, Brian K" <users-bounces at shibboleth.net on behalf of purcell at uthscsa.edu> wrote:

>    The "ah ha!" moment has arrived.  I was trying to put the NOT rule as a second PolicyRequirementRule,
> which wasn't kosher.  It didn't occur to me just do it for EPPN itself.

Or just AND it into the policy rule. It's more or less prefix notation, just with XML so more verbose.

(AND (something, NOT(something else))

<PolicyRequirementRule xsi:type="AND">
	<Rule...>
	<Rule xsi:type="NOT">
		<Rule ...>
	</Rule>
</PolicyRequirementRule>

-- Scott