attribute resolution during the login process

Cantor, Scott cantor.2 at osu.edu
Thu Aug 1 15:10:18 EDT 2013


On 8/1/13 2:47 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>> So is getting that handle to the base service and using it the right
>>way to
>> go?
>
>I suggest considering using the Attribute Authority as the interface
>so you have filtering in addition to resolution. I do not think there
>is any additional cost, since it is just a service like the Attribute
>Resolver.

It's typically not worth running the filter because you're resolving
attributes for "yourself" and don't tend to have policies that would apply
to a dummy requester value.

-- Scott




More information about the dev mailing list