From aab254a9894c8d04679e7aeffcab22f35eeadf7d Mon Sep 17 00:00:00 2001
From: Markus Krogh <markus@nordu.net>
Date: Mon, 2 Oct 2017 14:20:48 +0200
Subject: Rearange template files. Start on templating

---
 idp/template-config/attribute-filter.xml | 283 -------------------------------
 1 file changed, 283 deletions(-)
 delete mode 100644 idp/template-config/attribute-filter.xml

(limited to 'idp/template-config/attribute-filter.xml')

diff --git a/idp/template-config/attribute-filter.xml b/idp/template-config/attribute-filter.xml
deleted file mode 100644
index 3514282..0000000
--- a/idp/template-config/attribute-filter.xml
+++ /dev/null
@@ -1,283 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!--
-    This file is an EXAMPLE policy file.  While the policy presented in this
-    example file is illustrative of some simple cases, it relies on the names of
-    non-existent example services and the example attributes demonstrated in the
-    default attribute-resolver.xml file.
-
-    Deployers should refer to the documentation for a complete list of components
-    and their options.
--->
-<AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
-  xmlns="urn:mace:shibboleth:2.0:afp"
-  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-  xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd">
-
-  <AttributeFilterPolicy id="releaseTransientIdToAnyone">
-    <PolicyRequirementRule xsi:type="ANY" />
-
-    <AttributeRule attributeID="transientId">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="persistentId">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-
-  <!-- GEANT Data protection Code of Conduct -->
-  <AttributeFilterPolicy id="releaseToCoCo">
-    <PolicyRequirementRule xsi:type="EntityAttributeExactMatch"
-      attributeName="http://macedir.org/entity-category"
-      attributeValue="http://www.geant.net/uri/dataprotection-code-of-conduct/v1" />
-    <AttributeRule attributeID="displayName">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="cn">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="email">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonPrincipalName">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonScopedAffiliation">
-      <PermitValueRule xsi:type="AND">
-        <Rule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-        <Rule xsi:type="OR">
-          <Rule xsi:type="Value" value="faculty" ignoreCase="true" />
-          <Rule xsi:type="Value" value="student" ignoreCase="true" />
-          <Rule xsi:type="Value" value="staff" ignoreCase="true" />
-          <Rule xsi:type="Value" value="alum" ignoreCase="true" />
-          <Rule xsi:type="Value" value="member" ignoreCase="true" />
-          <Rule xsi:type="Value" value="affiliate" ignoreCase="true" />
-          <Rule xsi:type="Value" value="employee" ignoreCase="true" />
-          <Rule xsi:type="Value" value="library-walk-in" ignoreCase="true" />
-        </Rule>
-      </PermitValueRule>
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonAffiliation">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="schacHomeOrganization">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-    <AttributeRule attributeID="schacHomeOrganizationType">
-      <PermitValueRule xsi:type="AttributeInMetadata" onlyIfRequired="true" />
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-  <!-- REFEDS Research and Schoolarship -->
-  <AttributeFilterPolicy id="releaseToRandS">
-    <PolicyRequirementRule xsi:type="EntityAttributeExactMatch"
-      attributeName="http://macedir.org/entity-category"
-      attributeValue="http://refeds.org/category/research-and-scholarship" />
-
-    <AttributeRule attributeID="displayName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="givenName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="surname">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="email">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonPrincipalName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonScopedAffiliation">
-      <PermitValueRule xsi:type="OR">
-        <Rule xsi:type="Value" value="faculty" ignoreCase="true" />
-        <Rule xsi:type="Value" value="student" ignoreCase="true" />
-        <Rule xsi:type="Value" value="staff" ignoreCase="true" />
-        <Rule xsi:type="Value" value="alum" ignoreCase="true" />
-        <Rule xsi:type="Value" value="member" ignoreCase="true" />
-        <Rule xsi:type="Value" value="affiliate" ignoreCase="true" />
-        <Rule xsi:type="Value" value="employee" ignoreCase="true" />
-        <Rule xsi:type="Value" value="library-walk-in" ignoreCase="true" />
-      </PermitValueRule>
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-  <!-- entity-category-swamid-research-and-education -->
-  <AttributeFilterPolicy id="entity-category-research-and-education">
-    <PolicyRequirementRule xsi:type="AND">
-      <Rule xsi:type="OR">
-        <Rule xsi:type="EntityAttributeExactMatch"
-          attributeName="http://macedir.org/entity-category"
-          attributeValue="http://www.swamid.se/category/eu-adequate-protection" />
-        <Rule xsi:type="EntityAttributeExactMatch"
-          attributeName="http://macedir.org/entity-category"
-          attributeValue="http://www.swamid.se/category/nren-service" />
-        <Rule xsi:type="EntityAttributeExactMatch"
-          attributeName="http://macedir.org/entity-category"
-          attributeValue="http://www.swamid.se/category/hei-service" />
-      </Rule>
-      <Rule xsi:type="EntityAttributeExactMatch"
-        attributeName="http://macedir.org/entity-category"
-        attributeValue="http://www.swamid.se/category/research-and-education" />
-    </PolicyRequirementRule>
-
-    <AttributeRule attributeID="givenName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="surname">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="displayName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonPrincipalName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonAssurance">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="email">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonScopedAffiliation">
-      <PermitValueRule xsi:type="OR">
-        <Rule xsi:type="Value" value="faculty" ignoreCase="true" />
-        <Rule xsi:type="Value" value="student" ignoreCase="true" />
-        <Rule xsi:type="Value" value="staff" ignoreCase="true" />
-        <Rule xsi:type="Value" value="alum" ignoreCase="true" />
-        <Rule xsi:type="Value" value="member" ignoreCase="true" />
-        <Rule xsi:type="Value" value="affiliate" ignoreCase="true" />
-        <Rule xsi:type="Value" value="employee" ignoreCase="true" />
-        <Rule xsi:type="Value" value="library-walk-in" ignoreCase="true" />
-      </PermitValueRule>
-    </AttributeRule>
-    <AttributeRule attributeID="organizationName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="norEduOrgAcronym">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="countryName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="friendlyCountryName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="schacHomeOrganization">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-  <!-- Release some attributes to an SP. -->
-  <!-- Note: requester seems to need the path /shibboleth to be included to match this! -->
-  <AttributeFilterPolicy id="sp.nordu.dev">
-    <PolicyRequirementRule xsi:type="Requester" value="https://sp.nordu.dev/shibboleth" />
-    <!-- <PolicyRequirementRule xsi:type="ANY" /> -->
-    <AttributeRule attributeID="eduPersonPrincipalName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="uid">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="mail">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="givenName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="surname">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="displayName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="commonName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="employeeType">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="email">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonEntitlement">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="mailLocalAddress">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonScopedAffiliation">
-      <PermitValueRule xsi:type="OR">
-        <Rule xsi:type="Value" value="faculty" ignoreCase="true" />
-        <Rule xsi:type="Value" value="student" ignoreCase="true" />
-        <Rule xsi:type="Value" value="staff" ignoreCase="true" />
-        <Rule xsi:type="Value" value="alum" ignoreCase="true" />
-        <Rule xsi:type="Value" value="member" ignoreCase="true" />
-        <Rule xsi:type="Value" value="affiliate" ignoreCase="true" />
-        <Rule xsi:type="Value" value="employee" ignoreCase="true" />
-        <Rule xsi:type="Value" value="library-walk-in" ignoreCase="true" />
-      </PermitValueRule>
-    </AttributeRule>
-    <AttributeRule attributeID="organizationName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-  <!-- ukfederation + incommon -->
-  <AttributeFilterPolicy id="everyoneInSwamidFeed">
-    <PolicyRequirementRule xsi:type="InEntityGroup" groupID="http://mds.swamid.se/md/swamid-2.0.xml" />
-    <AttributeRule attributeID="givenName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="surname">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="displayName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="commonName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonPrincipalName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="email">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonEntitlement">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonTargetedID">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="eduPersonScopedAffiliation">
-      <PermitValueRule xsi:type="OR">
-        <Rule xsi:type="Value" value="faculty" ignoreCase="true" />
-        <Rule xsi:type="Value" value="student" ignoreCase="true" />
-        <Rule xsi:type="Value" value="staff" ignoreCase="true" />
-        <Rule xsi:type="Value" value="alum" ignoreCase="true" />
-        <Rule xsi:type="Value" value="member" ignoreCase="true" />
-        <Rule xsi:type="Value" value="affiliate" ignoreCase="true" />
-        <Rule xsi:type="Value" value="employee" ignoreCase="true" />
-        <Rule xsi:type="Value" value="library-walk-in" ignoreCase="true" />
-      </PermitValueRule>
-    </AttributeRule>
-    <AttributeRule attributeID="organizationName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="norEduOrgAcronym">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="countryName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="friendlyCountryName">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-    <AttributeRule attributeID="schacHomeOrganization">
-      <PermitValueRule xsi:type="ANY" />
-    </AttributeRule>
-  </AttributeFilterPolicy>
-
-</AttributeFilterPolicyGroup>
-- 
cgit v1.1