<div dir="ltr"><div>I'm trying to filter access on a group of students in ENGL101 -- it's a large class, so there are numerouse groups.<br><br></div>Is it the correct way to do so as follows? <br><div>          <br><Rule xsi:type="Value" attributeID="groupMembership" value="cn=ENGL_101_*,ou=example,dc=edu" /><div><br>And this will allow: "cn=ENGL_101_T4EVENING,ou=example,dc=edu"; "cn=ENGL_101_S2MORNING,ou=example,dc=edu" etc?</div><div><br></div><div>I got a bit lost on options.... configuring a new IdP (leaping from early v2 to v3.3).<br></div><div><br>    <AttributeFilterPolicy id="Internal"><br>      <PolicyRequirementRule xsi:type="AND"><br>        <Rule xsi:type="OR"><br>          <Rule xsi:type="Value" attributeID="memberOf" value="cn=test,ou=example,dc=edu"/><br>          <Rule xsi:type="Value" attributeID="groupMembership" value="cn=ENGL_101_*,ou=example,dc=edu" /><br>        </Rule><br>        <Rule xsi:type="Requester" value="<a href="https://sp-entity-id">https://sp-entity-id</a>"/><br>      </PolicyRequirementRule><br>            <br>            <AttributeRule attributeID="givenName"><br>                    <PermitValueRule xsi:type="ANY" /><br>            </AttributeRule><br>            <br>            <AttributeRule attributeID="sn"><br>                    <PermitValueRule xsi:type="ANY" /><br>            </AttributeRule><br>            <br>            <AttributeRule attributeID="displayName"><br>                <PermitValueRule xsi:type="ANY" /><br>            </AttributeRule><br>    <br>            <AttributeRule attributeID="mail"><br>                <PermitValueRule xsi:type="ANY"/><br>            </AttributeRule><br>      <br>    </AttributeFilterPolicy><br></div></div></div>