diff options
| author | Henrik Lund Kramshoej <hlk@kramse.org> | 2017-07-17 09:00:29 +0200 |
|---|---|---|
| committer | Henrik Lund Kramshoej <hlk@kramse.org> | 2017-07-17 09:00:29 +0200 |
| commit | 2cde1ad9192aafdb26fadfe1e40843689d0e2c43 (patch) | |
| tree | 291c5470bbd45aca0817dff348751222ebf6d4a8 | |
| parent | b446c181f747758a71c1cfc9a525b4d11842500d (diff) | |
Confirmed Attribute filter policy with requester requirementrule
| -rw-r--r-- | template-config/attribute-filter.xml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/template-config/attribute-filter.xml b/template-config/attribute-filter.xml index 2ba1d94..0a58df2 100644 --- a/template-config/attribute-filter.xml +++ b/template-config/attribute-filter.xml @@ -14,9 +14,10 @@ xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd"> <!-- Release some attributes to an SP. --> + <!-- Note: requester seems to need the path /shibboleth to be included to match this! --> <AttributeFilterPolicy id="sp.nordu.dev"> - <!-- <PolicyRequirementRule xsi:type="Requester" value="https://sp.nordu.dev" />--> - <PolicyRequirementRule xsi:type="ANY" /> + <PolicyRequirementRule xsi:type="Requester" value="https://sp.nordu.dev/shibboleth" /> + <!-- <PolicyRequirementRule xsi:type="ANY" /> --> <AttributeRule attributeID="eduPersonPrincipalName"> <PermitValueRule xsi:type="ANY" /> </AttributeRule> |