From e9dcb62309d7c29dd06438e4a7e21addba17bd76 Mon Sep 17 00:00:00 2001
From: Paul Scott <paul.scott@kau.se>
Date: Thu, 15 May 2025 12:34:40 +0000
Subject: Replace Sectigo with HARICA

---
 Shibboleth-IdP/v5/attribute-filter.xml | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/Shibboleth-IdP/v5/attribute-filter.xml b/Shibboleth-IdP/v5/attribute-filter.xml
index 94ed74c..3acd6f0 100644
--- a/Shibboleth-IdP/v5/attribute-filter.xml
+++ b/Shibboleth-IdP/v5/attribute-filter.xml
@@ -251,15 +251,15 @@
         </AttributeRule>
     </AttributeFilterPolicy>
 
-    <!-- Sectigo -->
-    <AttributeFilterPolicy id="releaseSectigoAttributeBundle">
-        <PolicyRequirementRule xsi:type="Requester" value="https://cert-manager.com/shibboleth" />
+    <!-- HARICA -->
+    <AttributeFilterPolicy id="releaseHaricaAttributeBundle">
+        <PolicyRequirementRule xsi:type="OR">
+            <Rule xsi:type="Requester" value="https://www.harica.gr/simplesamlphp/module.php/saml/sp/metadata.php/pki-grnet-sp" />
+            <Rule xsi:type="Requester" value="https://cm-stg.harica.gr/simplesamlphp/module.php/saml/sp/metadata.php/harica-cm-stg-sp" />
+        </PolicyRequirementRule>
         <AttributeRule attributeID="eduPersonPrincipalName">
             <PermitValueRule xsi:type="ANY"/>
         </AttributeRule>
-        <AttributeRule attributeID="displayName">
-            <PermitValueRule xsi:type="ANY" />
-        </AttributeRule>
         <AttributeRule attributeID="givenName">
             <PermitValueRule xsi:type="ANY" />
         </AttributeRule>
@@ -272,6 +272,9 @@
         <AttributeRule attributeID="schacHomeOrganization">
             <PermitValueRule xsi:type="ANY"/>
         </AttributeRule>
+        <AttributeRule attributeID="eduPersonTargetedID">
+            <PermitValueRule xsi:type="ANY"/>
+        </AttributeRule>
         <AttributeRule attributeID="tcsPersonalEntitlement">
             <PermitValueRule xsi:type="ANY"/>
         </AttributeRule>
-- 
cgit v1.2.3