SP - attribute-policy.xml - filter by entity?

Peter Schober peter.schober at univie.ac.at
Wed Dec 21 15:59:59 GMT 2011


* Douglas Spooner <spoonerd at rsc.org> [2011-12-21 16:42]:
> But I've come across an issue that I need some help on please. One
> federations I'm in the process of integrating with only wants us to
> accept certain values for eduPersonAffiliation
> 
> For Example
> 
> Fed 1,2,3 want us to accept faculty, student, staff, member, employee.
> Fed 4 wants us to only accept faculty, student, staff

Isn't it the service provider (RSC) who decides who's elegible for
this service?
If federations and IdPs give you headaches with such requests push the
work towards them and require them to send you an eduPersonEntitlement
with a value of your own chosing, e.g. http://www.rsc.org/user/academic
or settle on "urn:mace:dir:entitlement:common-lib-terms" if that
matches your use case, cf.
http://middleware.internet2.edu/urn-mace/urn-mace-dir-entitlement.html
-peter


More information about the users mailing list