Shibboleth IDP 3 as CAS Server

Marvin Addison marvin.addison at gmail.com
Thu Jun 11 16:25:39 EDT 2015


>
> The CAS protocol support components do, in fact, use the standard
> attribute filter.  The only catch is that there is no canonical entity ID,
> so the policy has to reference the URL of the service.


An alternative if you're using the service registry: you can define the
group and use a group-based filter expression in attribute-filter.xml.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150611/ca09dc02/attachment.html>


More information about the users mailing list