Add SAML match functions into example config
authorlajoie <lajoie@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Tue, 4 Dec 2007 16:41:13 +0000 (16:41 +0000)
committerlajoie <lajoie@ab3bd59b-922f-494d-bb5f-6f0a3c29deca>
Tue, 4 Dec 2007 16:41:13 +0000 (16:41 +0000)
git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@2488 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

resources/conf/attribute-filter.xml

index 97fa851..5372faf 100644 (file)
@@ -9,9 +9,11 @@
 -->
 
 <AttributeFilterPolicyGroup id="ShibbolethFilterPolicy" xmlns="urn:mace:shibboleth:2.0:afp"
-    xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic" xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="urn:mace:shibboleth:2.0:afp classpath:/schema/shibboleth-2.0-afp.xsd
-                        urn:mace:shibboleth:2.0:afp:mf:basic classpath:/schema/shibboleth-2.0-afp-mf-basic.xsd ">
+                        urn:mace:shibboleth:2.0:afp:mf:basic classpath:/schema/shibboleth-2.0-afp-mf-basic.xsd
+                        urn:mace:shibboleth:2.0:afp:mf:saml classpath:/schema/shibboleth-2.0-afp-mf-saml.xsd">
 
     <!--  Release the transient ID to anyone -->
     <AttributeFilterPolicy id="releaseTransientIdToAnyone">
@@ -30,9 +32,9 @@
     -->
     <AttributeFilterPolicy>
         <PolicyRequirementRule xsi:type="basic:OR">
-            <basic:Rule xsi:type="AttributeRequesterInEntityGroup" groupID="urn:mace:incommon" />
-            <basic:Rule xsi:type="AttributeRequesterInEntityGroup" groupID="http://ukfederation.org.uk" />
-            <basic:Rule xsi:type="AttributeRequesterInEntityGroup" groupID="urn:mace:switch.ch:SWITCHaai" />
+            <basic:Rule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="urn:mace:incommon" />
+            <basic:Rule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="http://ukfederation.org.uk" />
+            <basic:Rule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="urn:mace:switch.ch:SWITCHaai" />
         </PolicyRequirementRule>
 
         <AttributeRule attributeID="entitlement">