Using two dataconnectors for one service provider

[Cantor, Scott]

On 4/2/14, 12:06 PM, "Vanna" <VIGNESH at MUSC.EDU> wrote:

>OK. Can you tell me how can I prevent sending data to Box? How can I
>validate
>that user is in AD group as well as openldap in the authentication
>response?

You can add search filter criteria to various places, or you create new
attribute definitions to pull in the infnormation and build filter policy
rules that limit release of one thing based on the values of something
else.

Resolving data based on SP is generally a lousy approach, so using filter
rules is probably better.

-- Scott