Novell Netiq - Anyone have any experience with this IDP?

[Mike Flynn]

I am running a Shib SP (2.3.1) and they are running the NAM IDP (no idea of the version).  I am just trying to get a simple entitlement value in the entitlement attribute based on the user's role.  They are trying to figure out how to get an acceptable value into this attribute.  So far they have managed to pass some LDAP fields as a string something like this:

cn=Staff_Accounts,ou=Groups,o=ExampleValueu;cn=ustaff,ou=Groups,o=ExampleValueu;cn=Request_Tracker,ou=Groups,o=ExampleValue;cn=CSD,ou=Groups,o=ExampleValueu;cn=IT_StrategicPlanning_Share,ou=ManagedGroups,ou=Groups,o=ExampleValueu;cn=IT_Steering_Share,ou=ManagedGroups,ou=Groups,o=ExampleValue


That will not fly for my side of the application.  Just looking to figure out some rule on the IDP (or whatever config has to happen...) to send a value of say 'lyndaaccess' / 'nolyndaaccess' as the entitlement so that I can filter access based on the value.

Thanks!


________________________________
 From: David Gersic <dgersic at niu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Wednesday, October 2, 2013 11:23 AM
Subject: Re: Novell Netiq - Anyone have any experience with this IDP?
 

>>> On 10/2/2013 at 11:18 AM, Mike Flynn <shibbolethlynda at yahoo.com> wrote: 
> Thank you, David.  We connect and everything passes fine except for the 
> entitlement - That passes to us as well.  The issue is how the value for 
> entitlement is set on the IDP.  That's what we need to pin down :)

Can you re-phrase this as a question?

Not clear to me:

1. Are you running the SP or the IdP?
2. Is the SP Shibboleth or NAM?
3. Is the IdP Shibboleth or NAM?
4. What sort of entitlement are you trying to pass? How?

Additionally, what versions (Shib, NAM) are being used here?




--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131002/71c5264f/attachment.html