Minor changes to default filter per Ian's suggestions

git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2657 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

diff --git a/resources/conf/attribute-filter.xml b/resources/conf/attribute-filter.xml
index 724a579..81e2c2d 100644 (file)
--- a/resources/conf/attribute-filter.xml
+++ b/resources/conf/attribute-filter.xml
@@ -38,19 +38,16 @@
             <basic:Rule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="urn:mace:switch.ch:SWITCHaai" />
         </PolicyRequirementRule>
 
-        <AttributeRule attributeID="entitlement">
-            <PermitValueRule xsi:type="basic:ANY" />
-        </AttributeRule>
-
         <AttributeRule attributeID="affiliation">
             <PermitValueRule xsi:type="basic:OR">
-                <basic:Rule xsi:type="basic:AttributeValueString" value="faculty" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="student" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="staff" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="alumn" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="member" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="affliate" />
-                <basic:Rule xsi:type="basic:AttributeValueString" value="employee" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="faculty" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="student" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="staff" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="alumni" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="member" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="affiliate" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="employee" ignoreCase="true" />
+                <basic:Rule xsi:type="basic:AttributeValueString" value="library-walk-in" ignoreCase="true" />
             </PermitValueRule>
         </AttributeRule>