Shibboleth Attribute Filter

attribute-filter.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- 
    This file is an EXAMPLE policy file.  While the policy presented in this 
    example file is illustrative of some simple cases, it relies on the names of
    non-existent example services and the example attributes demonstrated in the
    default attribute-resolver.xml file.
    
    Deployers should refer to the documentation for a complete list of components
    and their options.
-->
<afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
        xmlns:afp="urn:mace:shibboleth:2.0:afp"
        xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic"
        xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="urn:mace:shibboleth:2.0:afp http://shibboleth.net/schema/idp/shibboleth-afp.xsd
                            urn:mace:shibboleth:2.0:afp:mf:basic http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd
                            urn:mace:shibboleth:2.0:afp:mf:saml http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd">

    <!-- Release some attributes to an SP. -->
    <afp:AttributeFilterPolicy id="tegrity">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://url-from-service-provider" />
	<afp:AttributeRule attributeID="role">
    		<afp:PermitValueRule xsi:type="basic:ANY"/>
	</afp:AttributeRule>
	

        <afp:AttributeRule attributeID="login_id">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="user_id">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="givenname">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
	
	<afp:AttributeRule attributeID="familyname">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="email">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>


    <afp:AttributeFilterPolicy id="SimpleSAML">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://simplesaml.psd401.net/simplesaml/module.php/saml/sp/metadata.php/default-sp" />
	<afp:AttributeRule attributeID="role">
    		<afp:PermitValueRule xsi:type="basic:ANY"/>
	</afp:AttributeRule>
	

        <afp:AttributeRule attributeID="login_id">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="department">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="user_id">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="givenname">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
	
	<afp:AttributeRule attributeID="familyname">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="email">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>


    <!-- Release eduPersonAffiliation to two specific SPs. -->
    <afp:AttributeFilterPolicy id="freshdesk">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://psdts.freshdesk.com/login/saml" />
	<afp:AttributeRule attributeID="User.email">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="User.FirstName">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="User.LastName">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="User.Username">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>


    <afp:AttributeFilterPolicy id="schoology">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="schoology-peninsulasso" />

        <afp:AttributeRule attributeID="username">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

        <afp:AttributeRule attributeID="email">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
    </afp:AttributeFilterPolicy>
	
    <afp:AttributeFilterPolicy id="follett">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="urn:peninsula.security.follettsoftware.com" />

        <afp:AttributeRule attributeID="username">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

   </afp:AttributeFilterPolicy>

   <afp:AttributeFilterPolicy id="JAMF">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://martinb.jamfcloud.com/saml/metadata" />
	
	<afp:AttributeRule attributeID="uid">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>		

	<afp:AttributeRule attributeID="mail">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
	
	<afp:AttributeRule attributeID="group">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

   </afp:AttributeFilterPolicy>

  <afp:AttributeFilterPolicy id="Homeroom">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="urn:schooldata.net" />

        <afp:AttributeRule attributeID="homeroom-username">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>
        
        <afp:AttributeRule attributeID="mail">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

    </afp:AttributeFilterPolicy>


    <afp:AttributeFilterPolicy id="Stemscopes">
        <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://url-from-service-provider" />

        <afp:AttributeRule attributeID="username">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

	<afp:AttributeRule attributeID="role">
            <afp:PermitValueRule xsi:type="basic:ANY" />
        </afp:AttributeRule>

    </afp:AttributeFilterPolicy>

</afp:AttributeFilterPolicyGroup>