Multi valued attribute separator.

[Cantor, Scott]

> I would like to know if it's possible to configure the separator for multi valued
> attributes like MemberOf.

There is no separator. Multiple values are multiple values.

> I'm trying to configure rules on juniper but when i see in my juniper debug
> log the MemberOf attribute supplied by shibboleth idp look like this :
> MemberOf = "group1 group2 group3"

Not unless you make it do that in some weird way, or the values aren't separate in the first place. Multiple LDAP values are returned as multiple values and maintained as multiple values throughout.

If you're talking about the SP, then that's something else entirely.

-- Scott