ScopeMatchesShibMDScope question
Tomas Stenlund
tomas.stenlund at telia.com
Wed Mar 20 18:12:11 UTC 2024
Hi,
a quick check. I'm trying to find a peculiar behavior in our test setup.
When it comes to using this scope matcher when the attribute contains
multiple @, what is the expected behavior in this case?
For instance this rule:
<AttributeRule attributeID="orgAffiliation">
<PermitValueRule xsi:type="ScopeMatchesShibMDScope" />
</AttributeRule>
and this in the extension in the metadata of the issuing idp.
<shibmd:Scope regexp="false">1234567890</shibmd:Scope>
would this be permitted and let through the filtering if orgAffiliation
(It is a scoped variable) contains "baba at yaga@1234567890"?
Thanks,
Tomas
More information about the users
mailing list