Shibboleth Developers

[Scott Cantor <>]

The major changes to the AAP section (used to be 4.e) should capture:

Both scoped and simple attributes are affected by AAP rules now. The 0.8 docs 
confine this to Simple, and say that Scoped are
handled by the sites file. This is no longer true. For Scoped attributes, the 
attribute value (the left-hand side) is filtered by
the AAP. The scope (the right hand-side) is filtered by the Domain elements 
in the sites file.

A new <AnyValue> element is available for defining attribute rules. To make 
sure that an attribute is visible, a basic rule like
this must be defined for every attributes:

<AttributeRule Name="<attribute URI>">
        <AnySite><AnyValue/></AnySite>
</AttributeRule>

Alternatively, this is equivalent:

<AttributeRule Name="<attribute URI>">
        <AnySite><Value type="regexp">.</Value></AnySite>
</AttributeRule>

I would suggest taking out the last paragraph that starts "Note that the AAP 
rules...". It seems overly detailed for this document,
and isn't really accurate any more in terms of pointing at the right source 
code to examine."

Eventually, I think we'll produce a "Shibboleth Programmers Guide" that 
includes this kind of stuff.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--