Setting up IdP3 to release set of attributes only to CAS users

Rod Widdowson rdw at steadingsoftware.com
Thu Aug 13 13:04:45 EDT 2015


> To clarify a little more since there’s different ways to use CAS with
Shib,
> we’re using the embedded CAS protocol in Shibboleth IdP3 and want to
> release a set of attributes to everyone that logs in using CAS protocol.

It sounds like you need to use the activationConditions on the attribute
resolvers.  I don't think that there is a pre-defines predicate available,
but Marvin will have suggestions about where to look and you do have the
scriptedCondition in your toolkit.

Or Marvin will tell me that I've barked up the wrong tree.

/Rod



More information about the users mailing list