conf file style question

[Liam Hoekenga]

We have an entitlement that we'd like to grant based on multiple attributes
(HR data, student data, alumni data, etc).  It's not enough that they have
institutional roles of faculty, staff or student - rather they need to be
associated with a specific unit at our university.

We could probably do this by creating a bunch of parallel mapped attribute
definitions, each one looking at a different source attribute.. we used a
script to handle a similar situation for our ePSA values, so we could issue
campus specific scopes based on institutional role data.

I feel like defining this stuff in configuration is slightly easier to
read, but I wonder if using a script is faster (or maybe slower).

any advice re: parallel attribute definitions to populate a single end
attribute vs using a script?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140630/e449afe9/attachment.html