Intercept Flows and checking raw LDAP attributes

[Jeffrey Crawford]

I feel like I'm missing something simple here, I have an interrupt flow
that will work based off of the context-check example, however if the SAML
attribute eduPersonAffiliation is not released to the SP in question and
I'm trying to check against it, I get the following in the logs.

Attribute eduPersonAffiliation not found in context

It only works if the attribute-filter has eduPersonAffiliation released to
the SP, but I want to check that attribute even if it's not released, Can I
check against the raw LDAP attribute as opposed to the attributes in the
SAML profile?

Thanks

Jeffrey <jeffreyc at ucsc.edu>

Both pilots and IT professionals require training and currency before
charging into clouds!
---------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150803/4e98c43d/attachment.html>