Support multiple configurations for AttributeResolver Shibboleth plugin

roles/shibboleth-sp/defaults/main.yml

@@ -147,7 +147,14 @@ shibboleth_sp_attribute_extractors:
 
 shibboleth_sp_attribute_resolvers:
   - type: "Query"
-    subject_match: "true"
+    subjectMatch: "true"
+  - type: "Transform"
+    source: "eduPersonScopedAffiliation"
+    regex:
+    - value: "$1"
+      properties:
+        match: "^(.+)@(.+)"
+        dest: "eduPersonPrimaryAffiliation"
 
 # The default settings can be overridden by creating ApplicationOverride
 # elements. When you use virtual hosting, there is no special handler

roles/shibboleth-sp/templates/shibboleth2.xml.j2

@@ -205,11 +205,21 @@
 {% endfor %}
 
 {% for resolver in shibboleth_sp_attribute_resolvers %}
-        <AttributeResolver type="{{ resolver.type }}" 
-{% if resolver.subject_match is defined %}
-            subjectMatch="{{ resolver.subject_match }}"
-{% endif %}
-        />
+        <AttributeResolver
+    {%- for key, value in resolver.items() -%}
+        {% if "regex" not in key %}
+ {{ key }}="{{ value }}"
+        {%- endif -%}
+    {%- endfor %}>
+    {% if resolver.regex is defined %}
+        {% for regex_properties in resolver.regex -%}
+           <Regex
+        {%- for key, value in regex_properties.properties.items() %}
+ {{ key }}="{{ value }}"
+        {%- endfor %}>{{ regex_properties.value | default('') }}</Regex>
+        {% endfor %}
+    {%-  endif -%}
+        </AttributeResolver>
 {% endfor %}
 
         <!-- Default filtering policy for recognized attributes, lets other data pass. -->