`core:CardinalitySingle`

Ensure the correct cardinality of single-valued attributes. This filter is a special case of the more generic core:Cardinality filter that allows for optional corrective measures when multi-valued attributes are received where single-valued ones are expected.

Parameters

This filter implements a number of optional parameters:

singleValued: array of attribute names that must be single-valued, or a 403 error is generated.
firstValue: array of attribute names where only the first value of a multi-valued assertion should be returned.
flatten: array of attribute names where a multi-valued assertion is flattened into a single delimited string.
flattenWith: the delimiter for flatten . Defaults to ";".
ignoreEntities: array of entity IDs that should be ignored for testing, etc purposes.

When the same attribute name appears in multiple stanzas, they are processed in the order above.

Examples

Abort with an error if any attribute defined as single-valued in the eduPerson or SCHAC schemas exists and has more than one value:

  'authproc' => [
      50 => [
          'class' => 'core:CardinalitySingle',
          'singleValued' => [
              /* from eduPerson (internet2-mace-dir-eduperson-201602) */
              'eduPersonOrgDN', 'eduPersonPrimaryAffiliation', 'eduPersonPrimaryOrgUnitDN',
              'eduPersonPrincipalName', 'eduPersonUniqueId',
              /* from inetOrgPerson (RFC2798), referenced by internet2-mace-dir-eduperson-201602 */
              'displayName', 'preferredLanguage',
              /* from SCHAC-IAD Version 1.3.0 */
              'schacMotherTongue', 'schacGender', 'schacDateOfBirth', 'schacPlaceOfBirth',
              'schacPersonalTitle', 'schacHomeOrganization', 'schacHomeOrganizationType',
              'schacExpiryDate',
          ],
      ],
  ],

Abort if multiple values are received for eduPersonPrincipalName , but take the first value for eduPersonPrimaryAffiliation :

  'authproc' => [
      50 => [
          'class' => 'core:CardinalitySingle',
          'singleValued' => ['eduPersonPrincipalName'],
          'firstValue' => ['eduPersonPrimaryAffiliation'],
          ],
      ],
  ],

Construct eduPersonPrimaryAffiliation using the first value in eduPersonAffiliation :

  'authproc' => [
      50 => [
          'class' => 'core:AttributeCopy',
          'eduPersonAffiliation' => 'eduPersonPrimaryAffiliation',
      ],
      51 => [
          'class' => 'core:CardinalitySingle',
          'firstValue' => ['eduPersonPrimaryAffiliation'],
      ],
  ],

Construct a single, comma-separated value version of eduPersonAffiliation :

  'authproc' => [
      50 => [
          'class' => 'core:AttributeCopy',
          'eduPersonAffiliation' => 'eduPersonAffiliationWithCommas',
      ],
      51 => [
          'class' => 'core:CardinalitySingle',
          'flatten' => ['eduPersonAffiliationWithCommas'],
          'flattenWith' => ',',
      ],
  ],