Franchise access being authenticated by our Shibboleth IdP

[Keith Carr]

On 24/02/12, "Cantor, Scott"  <cantor.2 at osu.edu> wrote:
> > Ah, ok cool. What happens if they have multiple entitlements (one for each
> > SP they are entitled to)? How does the simple attribute model these?
> 
> They're all present. The filter engine can be used to limit release to just the ones that apply to a service. Changing the filter is a simple operation that can be done without significant effort or worrying about restarting the IdP, whereas changing the resolver really isn't.
> 
Yes, have made changes to the filter before and is relatively simple.
So if the entitlements are stored as a multi-valued attribute in LDAP it will create an eduPersonEntitlement attribute for each? Or give one eduPersonEntitlement attribute multiple values?
-Kieth

> 
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120224/60c01c80/attachment.html