Seitenhistorie

<afp:AttributeFilterPolicy id="RDB-Manz">
    <afp:PolicyRequirementRule xsi:type="basic:OR">
        <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://cas.manz.at/shibboleth" />
        <basic:Rule xsi:type="basic:AttributeRequesterString" value="https://tst-cas.manz.at/shibboleth" />
    </afp:PolicyRequirementRule>
 
    <!-- nur jene affiliation-werte weitergeben, die autorisierte personengruppen indentizieren -->
    <afp:AttributeRule attributeID="eduPersonScopedAffiliation">
        <afp:PermitValueRule xsi:type="basic:OR">
            <basic:Rule xsi:type="basic:AttributeValueString" value="faculty" ignoreCase="true" />
            <basic:Rule xsi:type="basic:AttributeValueString" value="student" ignoreCase="true" />
            <basic:Rule xsi:type="basic:AttributeValueString" value="staff" ignoreCase="true" />
            <basic:Rule xsi:type="basic:AttributeValueString" value="employee" ignoreCase="true" />
        </afp:PermitValueRule>
    </afp:AttributeRule>
 
    <!-- eindeutige kennung freigeben, nach lokaler praeferenz/verfuegbarkeit -->
    <!--
    <afp:AttributeRule attributeID="persistentId">
        <afp:PermitValueRule xsi:type="saml:AttributeInMetadata" onlyIfRequired="false" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="eduPersonTargetedID">
        <afp:PermitValueRule xsi:type="saml:AttributeInMetadata" onlyIfRequired="false" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="eduPersonPrincipalName">
        <afp:PermitValueRule xsi:type="saml:AttributeInMetadata" onlyIfRequired="false" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="matrikel">
        <afp:PermitValueRule xsi:type="basic:AttributeValueRegex" regex="^urn:schac:personalUniqueCode:int:studentID:AT:[0-9]{7}$" />
    </afp:AttributeRule>
    <afp:AttributeRule attributeID="email">
        <afp:PermitValueRule xsi:type="saml:AttributeInMetadata" onlyIfRequired="false" />
    </afp:AttributeRule>
    -->
 
    <!-- NUR fuer institutionen mit zusatzvereinbarungen mit Manz bezueglich studentischen RDB-fernzugriffen (z.B. Linzer Rechtsstudien) -->
    <!--
    <afp:AttributeRule attributeID="eduPersonEntitlement">
        <afp:PermitValueRule xsi:type="basic:AttributeValueString" value="https://rdb.manz.at/student/remote-access" />
    </afp:AttributeRule>
    -->
</afp:AttributeFilterPolicy>