School me on hub and spoke federations

Keith Hazelton hazelton at wisc.edu
Tue May 14 13:39:11 EDT 2013


Mike,

On May 14, 2013, at 12:31 , "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>> Typical for us is a 1 year contract for access to all services for a given
>> institution.
> 
> I don't see how that's not identifying the contract rather than the university. Identifying contracts seems to work regardless.
> 
> -- scott

That is, each person from that institution could carry an eduPersonEntitlement value in their SAML assertions to your SPs that your SPs would be able to map one-to-one to the appropriate contract. Same entitlement value for all individuals coming from that IdP in the case you describe. --Keith
________________
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list