anchor.diff:          </afp:AttributeRule>
   
       </afp:AttributeFilterPolicy>
  +    -->
   
     <%
        i = 0
  
positive.code:        else
           ruletype = "afp:PolicyRequirementRule"
         end
         
      -%>
      <% if item['entityids'].count == 1 -%>
        <<%= ruletype %> xsi:type="basic:AttributeRequesterString"   
          value="<%= item['entityids'].first %>" />
      <% else -%>
        <<%= ruletype %> xsi:type="basic:OR">
          <% item['entityids'].each do |entityid| -%>
            <basic:Rule xsi:type="basic:AttributeRequesterString" value="<%= entityid %>" />
          <% end -%>
        </<%= ruletype %>>
      <% end -%>
      <% if item.has_key?('attribute_filter') -%>
        <% item['attribute_filter'].each do |attribute,values| -%>
          <%
  
negative.code:                                                     urn:mace:shibboleth:2.0:afp:mf:saml classpath:/schema/shibboleth-2.0-afp-mf-saml.xsd">
  
      <!--  Release the transient ID to anyone -->
      <!--
      <afp:AttributeFilterPolicy id="releaseTransientIdToAnyone">
          <afp:PolicyRequirementRule xsi:type="basic:ANY"/>
  
  