ScopeMatchesShibMDScope question

Tomas Stenlund tomas.stenlund at telia.com
Wed Mar 20 18:12:11 UTC 2024


Hi,

a quick check. I'm trying to find a peculiar behavior in our test setup. 
When it comes to using this scope matcher when the attribute contains 
multiple @, what is the expected behavior in this case?

For instance this rule:

         <AttributeRule attributeID="orgAffiliation">
             <PermitValueRule xsi:type="ScopeMatchesShibMDScope" />
         </AttributeRule>

and this in the extension in the metadata of the issuing idp.

     <shibmd:Scope regexp="false">1234567890</shibmd:Scope>

would this be permitted and let through the filtering if orgAffiliation 
(It is a scoped variable) contains "baba at yaga@1234567890"?

Thanks,

Tomas




More information about the users mailing list