From 2cde1ad9192aafdb26fadfe1e40843689d0e2c43 Mon Sep 17 00:00:00 2001
From: Henrik Lund Kramshoej <hlk@kramse.org>
Date: Mon, 17 Jul 2017 09:00:29 +0200
Subject: Confirmed Attribute filter policy with requester requirementrule

---
 template-config/attribute-filter.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/template-config/attribute-filter.xml b/template-config/attribute-filter.xml
index 2ba1d94..0a58df2 100644
--- a/template-config/attribute-filter.xml
+++ b/template-config/attribute-filter.xml
@@ -14,9 +14,10 @@
         xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd">
 
         <!-- Release some attributes to an SP. -->
+        <!-- Note: requester seems to need the path /shibboleth to be included to match this! -->
         <AttributeFilterPolicy id="sp.nordu.dev">
-            <!-- <PolicyRequirementRule xsi:type="Requester" value="https://sp.nordu.dev" />-->
-            <PolicyRequirementRule xsi:type="ANY" />
+            <PolicyRequirementRule xsi:type="Requester" value="https://sp.nordu.dev/shibboleth" />
+            <!-- <PolicyRequirementRule xsi:type="ANY" /> -->
             <AttributeRule attributeID="eduPersonPrincipalName">
                 <PermitValueRule xsi:type="ANY" />
             </AttributeRule>
-- 
cgit v1.1