release same attributes to a group SPs

Qian, Yi yqian at ku.edu
Fri Aug 2 13:41:51 EDT 2013


Thanks, Nate and Peter, both method works, I picked the one Peter
recommended, I only need to modify attribute-filter.xml

On 8/2/13 2:44 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* Nate Klingenstein <ndk at internet2.edu> [2013-08-01 23:12]:
>> The "groupID" is actually the name="groupIDGoesHere" element on the
>> <EntitiesDescriptor> object.  The first paragraph describing the
>> example may be helpful.
>
>Name="foo" (not name="foo"), yes.
>
>If you don't control the metadata (or the EntitiesDescriptor around
>those SPs contains too much, i.e., entitites you don't want included
>in your filter policy) you can release attributes to an enumerated
>list of SPs by OR'ing them together, like in the second example in
>https://wiki.shibboleth.net/confluence/display/SHIB2/IdPFilterRequirementA
>ttributeRequesterString
>-peter
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>




More information about the users mailing list