Release different value for affiliation based on service provider

Cantor, Scott cantor.2 at osu.edu
Tue Nov 13 19:48:02 EST 2012


On 11/13/12 6:17 PM, "john spence" <polymorp at gmail.com> wrote:
>
>For example, release "eduPersonScopedAffiliation" with a specific
>value of  "Member" to some providers but release a more specific value
>such as "Staff" , "Student" to other providers.
>I would like to be able to do the same with "entitlement" as well so
>as not to overfill the attribute with information only a couple of
>specific providers are actually interested in.

Sometimes that's more of a filtering use case, but if you really want to
affect the values in the resolver, you would normally have to use a
scriptlet for that, unless the data were in a relational database that you
could query by entityID or something.

>I cannot see anyway to pass the service provider name/url to a
>database stored procedure which would ideally move the logic out of
>shibboleth or even just a way to say, use this source for the
>attribute if the provider is X otherwise use this source for the
>value.
>
>Can anyone point me in the right direction of an answer or tell me it
>just is not possible.

Well, the API for the SP name is requestContext.getPeerEntityId()

Could be used in a SQL template in a connector, or in a scriptlet.

-- Scott




More information about the users mailing list