README

Install

composer require niif/simplesamlphp-module-attributelimit

Usage

This module is a forked version of SimpleSAMLphp core:AttributeLimit. It adds the functionality of specifying bilateral attribute relations in addition to the attribute rules defined in the peer's metadata. You can both specify SP entityIDs where you send some additional attributes (bilateralSPs) and special attributes to send to some SPs (bilateralAttributes).

Example configuration:

$config = array(
    'class' => 'niif:AttributeLimit',
    'bilateralSPs' => array(
        'entityid1' => array(
            'attr1',
            'attr2'
        ),
        'entityid2' => array(
            'attr1',
            'attr2'
        ),
    ),
    'bilateralAttributes' => array(
        'attr1' => array(
            'entityid1',
            'entityid2'
        ),
        'attr2' => array(
            'entityid1',
            'entityid2'
        ),
    ),
    'attribute_x', 'attribute_y',
)