Franchise access being authenticated by our Shibboleth IdP

[Chad La Joie]

Nope, not even that.  If the entitlement is stored in your directory
just look it up with the LDAP data connector and use the simple
attribute definition.  So, a pretty simple resolver config.

Then you use the filter engine to release the entitlement for SP 1 to
SP 1, for SP 2 to SP 2, etc.

On Fri, Feb 24, 2012 at 09:42, Keith Carr <kecarr at sgul.ac.uk> wrote:
> So all I need to do is write some JavaScript within the eduPersonEntitlement
> attribute definition in attribute-resolver.xml to pull out the relevant SP N
> entitlement from LDAP?


-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered