Setting up IdP3 to release set of attributes only to CAS users

[Cantor, Scott]

On 8/14/15, 10:45 AM, "users on behalf of Marvin Addison" <users-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:

>
>One thing to note for posterity: expect collisions if you use a regex for the policy requirement rules on CAS services. It’s very likely that something like `^https://.*\.somegreatuniversity\.edu/.*`, for instance, is going to match some SAML SPs as well.
>
>
>Good point. I think that in many cases the overlap would be intentional and desirable, but if not it ought to be possible to construct more restrictive regular expressions to scope it properly.

It's possible in the most extreme case to slip in a script to check the protocol involved if that's really desirable.

-- Scott