assigning eduperson based on memberof

[David Langenberg]

Why not create another attribute based on group membership & then use a
MappedAttribute to build eduPersonAffiliation?
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverMappedAttributeDefinition

We do this for eduPersonEntitlement and it's worked out quite well.

Dave


On Thu, Jul 11, 2013 at 9:17 AM, Morris, Andi <amorris at cardiffmet.ac.uk>wrote:

>  Hi all,****
>
> We currently assign eduPersonAffiliation depending on Active Directory
> group membership, but there is a bit of a crossover with two of our groups
> starting with the same string.****
>
> Users that are members of the group “STUDENT” get added the ‘student’
> value added to the eduPersonAffiliation attribute just fine, but members of
> the group “STU” are members of our student union and need to be given the
> value ‘member’, except that they are being given ‘student’.****
>
> ** **
>
> The code I’m using to get this is:****
>
> “                if (value.contains("student")) {****
>
>                     eduPersonAffiliation.getValues().add("student");****
>
> “****
>
> ** **
>
> I’ve tried changing value.contains to value.equals, but this just ends up
> with neither group being assigned a value for this attribute.****
>
> ** **
>
> Can anybody please help with this scripting query? Apologies that it’s not
> strictly a shibboleth issue.****
>
> ** **
>
> Cheers,****
>
> Andi****
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130711/d8f3f5dc/attachment.html