attribute resolution during the login process
Paul Hethmon
paul.hethmon at clareitysecurity.com
Thu Aug 1 15:01:44 EDT 2013
On 8/1/13 2:47 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:
>> So is getting that handle to the base service and using it the right
>>way to
>> go?
>
>I suggest considering using the Attribute Authority as the interface
>so you have filtering in addition to resolution. I do not think there
>is any additional cost, since it is just a service like the Attribute
>Resolver.
>--
I think the attribute resolver will be the right choice, especially if I
can get it to only get the attributes I need internally. This resolution
is for the MCB to consume and not for the benefit of the relying party
(where filtering is important). I can see where this attribute is not
actually exposed to any relying party.
cheers,
Paul
More information about the dev
mailing list