<div dir="ltr"><div dir="ltr"><div>The following REGEX is permissive --- releases all 'memberOf' values to the SP -- as it is multi-valued (irrespective if group is in the 2 OUs listed).</div><div><br></div><div>Under OUs 'xxxx' and 'yyyy' -- there are 100s of groups --- so not practical to list each group name in the 'attribute-filter'.</div><div><br></div><div>Would a REGEX maven be able to provide hint on appropriate REGEX to release only groups under the respective OU '<span style="color:rgb(42,0,255);font-family:Monaco;font-size:13px">xxxx,foobar</span>' and '<span style="color:rgb(42,0,255);font-family:Monaco;font-size:13px">yyy,foobar</span>'?</div><div><br></div><br><div><br></div><div>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(42,0,255)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"><</span><span class="gmail-s3" style="color:rgb(63,127,127)">AttributeRule</span><span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">attributeID</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"memberOf"<span class="gmail-s2" style="color:rgb(0,128,128)">></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(63,127,127)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><span class="gmail-Apple-tab-span" style="white-space:pre"> </span><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"><</span>PermitValueRule<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">xsi:type</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span><span class="gmail-s5" style="color:rgb(42,0,255)">"OR"</span><span class="gmail-s2" style="color:rgb(0,128,128)">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(42,0,255)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"><</span><span class="gmail-s3" style="color:rgb(63,127,127)">Rule</span><span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">xsi:type</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"ValueRegex"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">attributeID</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"groupMembership"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">regex</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"^(.*?)ou=xxxx,foobar"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s2" style="color:rgb(0,128,128)">/></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(42,0,255)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-tab-span" style="white-space:pre"> </span> <span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"><</span><span class="gmail-s3" style="color:rgb(63,127,127)">Rule</span><span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">xsi:type</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"ValueRegex"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">attributeID</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"groupMembership"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s4" style="color:rgb(127,0,127)">regex</span><span class="gmail-s1" style="color:rgb(0,0,0)">=</span>"^(.*?)ou=yyy,foobar"<span class="gmail-s1" style="color:rgb(0,0,0)"> </span><span class="gmail-s2" style="color:rgb(0,128,128)">/></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(63,127,127)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"></</span>PermitValueRule<span class="gmail-s2" style="color:rgb(0,128,128)">></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(63,127,127)"><span class="gmail-s1" style="color:rgb(0,0,0)"><span class="gmail-Apple-converted-space"> </span></span><span class="gmail-s2" style="color:rgb(0,128,128)"></</span>AttributeRule<span class="gmail-s2" style="color:rgb(0,128,128)">></span></p></div></div></div>