Navigate to Administration, then Federations. Select Update Manually; under Oracle Identity Federation Settings, click Edit

5-64 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

5.9.2.3 Configuring Attribute Value Filtering

Take these steps:

1. Log in to Fusion Middleware Control and navigate to the Oracle Identity

Federation instance.

2. Navigate to Administration, then Federations.

3. Select the attribute requester with which you want to configure attribute sharing,

and click Edit. 4. Select Update Manually; under Oracle Identity Federation Settings, click Edit Attribute Mappings and Filters .

5. Under the Value Filters tab, click Add to add an attribute value filter, with the

following fields: ■ Attribute Name: The name of the local attribute in the user repository ■ Condition Operator: Select and to indicates that all conditions need to be met for an attribute to be sent. Select or to indicate meeting one condition is enough to send an attribute. ■ A list of filtering rules with the following fields – Condition: The condition that will be used to evaluate the attribute value. – Expression: The value or regular expression that will be used to evaluate the attribute value. – Ignore Case: If checked, indicates that the string comparison should be case-sensitive when matching attribute values.

5.9.2.3.1 Filtering Conditions

Oracle Identity Federation provides several filtering conditions: ■ equals: the filtering rule will return true if the expression value is equal to the outgoing attribute value. ■ does not equal: the filtering rule will return true if the expression value is different from the outgoing attribute value. ■ starts with: the filtering rule will return true if the outgoing attribute value begins with the expression value. ■ ends with: the filtering rule will return true if the outgoing attribute value ends with the expression value. ■ contains: the filtering rule will return true if the outgoing attribute value contains the expression value. ■ does not contain: the filtering rule will return true if the outgoing attribute value does not contain the expression value. ■ equals null: the filtering rule will return true if the outgoing attribute value is null. ■ does not equal null: the filtering rule will return true if the outgoing attribute value is not null. ■ regexp: the filtering rule will return true if the outgoing attribute value matches the regular expression, which is defined in the expression value.