Attribute resolver vs. script

[Cantor, Scott]

On 12/3/15, 2:27 PM, "users on behalf of Dave Bartholomew" <users-bounces at shibboleth.net on behalf of Dave.Bartholomew at csueastbay.edu> wrote:



>For both IdP 3.x and 2.x (I would guess no difference), if I want to return one of two separate (different attribute) e-mail addresses to an SP based on the user’s eduPersonPrimaryAffiliation (we provide separate staff/faculty and student e-mail accounts), is that doable using attribute-resolver configuration or is scripting my only choice?

I think you can probably get creative with the Mapped or Template definitions if you really wanted to. Scripts with Rhino at least are simple enough that I'm not sure you're gaining much.

-- Scott