Franchise access being authenticated by our Shibboleth IdP

[Keith Carr]

On 24/02/12, Chad La Joie  <lajoie at itumi.biz> wrote:
> Nope, not even that.  If the entitlement is stored in your directory
> just look it up with the LDAP data connector and use the simple
> attribute definition.  So, a pretty simple resolver config.
> 
Ah, ok cool. What happens if they have multiple entitlements (one for each SP they are entitled to)? How does the simple attribute model these?
-Keith

> 
> 
> Then you use the filter engine to release the entitlement for SP 1 to
> SP 1, for SP 2 to SP 2, etc.
> 
> On Fri, Feb 24, 2012 at 09:42, Keith Carr <kecarr at sgul.ac.uk> wrote:
> > So all I need to do is write some JavaScript within the eduPersonEntitlement
> > attribute definition in attribute-resolver.xml to pull out the relevant SP N
> > entitlement from LDAP?
> 
> 
> -- 
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120224/2f20ec25/attachment.html