Multiple Dependency/sourceAttributeID

Joel Levin joel.aaron.levin at gmail.com
Fri Nov 13 13:59:21 EST 2015


Hi:

I am trying to build a new entitlement - that is based on presence of any 4
other entitlements - i.e. finalEntitlement = entitlement1 OR entitlement2
OR entitlement3 OR entritlement4.

Here is what I have so far - it obviously does not work.

Each of the 4 entitlements have a unique Attribute Definition and
corresponding unique sourceAttributeId (I know - the data is messy) - the
individual entitlements have complex SQL queries behind them.

Any ideas on how to proceed? If not possible - that is good to know as well.

There is a separate AttributeDefinition that all the separate
eduPersonEntitlement Calculations feed up.

          <resolver:AttributeDefinition id="finalEntitlement">

                    <resolver:Dependency ref="eduPersonEntitlement
Calculation 1" />
                    <resolver:Dependency ref="eduPersonEntitlement
Calculation 2" />
                    <resolver:Dependency ref="eduPersonEntitlement
Calculation 3" />
                    <resolver:Dependency ref="eduPersonEntitlement
Calculation 4" />

                    <DefaultValue>https://www.example.com/foobar
</DefaultValue>

                    <ValueMap>
                         <ReturnValue>https://www.example.com/superstar
</ReturnValue>
                         <SourceValue>eduPersonEntitlement Calculation
1</SourceValue>
                         <SourceValue>eduPersonEntitlement Calculation
2</SourceValue>
                         <SourceValue>eduPersonEntitlement Calculation
3</SourceValue>
                         <SourceValue>eduPersonEntitlement Calculation
4</SourceValue>
                     </ValueMap>


                      <resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
                                name="urn:mace:dir:attribute-def:final"
                                friendlyName="final" />

          </resolver:AttributeDefinition>

On Fri, Nov 13, 2015 at 10:43 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 11/13/15, 1:14 PM, "users on behalf of Joel Levin" <
> users-bounces at shibboleth.net on behalf of joel.aaron.levin at gmail.com>
> wrote:
>
>
>
> >Is it possible for 'AttributeDefinition' to have multiple 'Dependency' &
> 'sourceAttributeID'?
>
> There is no single semantic for source attribute (and it's often broken
> for many). You're going to have to ask about a specific attribute
> definition type.
>
> Any plugin can have multiple dependencies.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151113/434a511c/attachment-0001.html>


More information about the users mailing list