idpv3 attribute-resolver + PluginActivationConditions

Jarno Huuskonen jarno.huuskonen at uef.fi
Thu Aug 27 07:46:21 EDT 2015


Hi,

Is possible to use ExternalAttributePluginActivationConditions
(shibboleth.Conditions.RelyingPartyId)
(https://wiki.shibboleth.net/confluence/display/IDP30/ExternalAttributePluginActivationConditions)
with "RelyingPartyByGroup" ?

For example if I have edugain metadata with:
<md:EntitiesDescriptor ... Name="http://edugain.org/" ...>
is it possible to match this group Name with
shibboleth.Conditions.RelyingPartyId in attribute-resolver ?

And is it possible to negate ActivationConditions ?
(to have a condition where edugain-group gets this attribute-resolver
and !edugain-group(everybody else) gets something else).

-Jarno

-- 
Jarno Huuskonen


More information about the users mailing list