question about releasing a specific value for all users

[Cantor, Scott]

On 4/13/12 3:59 PM, "Scott Cantor" <cantor.2 at osu.edu> wrote:

>On 4/13/12 2:57 PM, "XiaoXia Dong" <x-dong at northwestern.edu> wrote:
>
>>Hello Shibboleth Experts,
>> 
>>I need your experts¹ opinion to see whether something like this is
>>possible. I like to set up our IdP to talk to JSTOR, which requires a
>>value of edupersonentitlement. However we ony have schema defined for
>>this attribute, no value is populated.
>
>As long as you continue to run 1.3, the answer is no, not easily.

Actually, I "misremembered", there is/was a static data connector in 1.3.
So same advice applies.

But that's not really a good idea. If you release an entitlement for all
users, then you are assuming that nobody without access to that service
could ever authenticate to your IdP. It's fairly unlikely that that would
be the case.

-- Scott