Multiple Dependency/sourceAttributeID
Joel Levin
joel.aaron.levin at gmail.com
Fri Nov 13 13:59:21 EST 2015
Hi:
I am trying to build a new entitlement - that is based on presence of any 4
other entitlements - i.e. finalEntitlement = entitlement1 OR entitlement2
OR entitlement3 OR entritlement4.
Here is what I have so far - it obviously does not work.
Each of the 4 entitlements have a unique Attribute Definition and
corresponding unique sourceAttributeId (I know - the data is messy) - the
individual entitlements have complex SQL queries behind them.
Any ideas on how to proceed? If not possible - that is good to know as well.
There is a separate AttributeDefinition that all the separate
eduPersonEntitlement Calculations feed up.
<resolver:AttributeDefinition id="finalEntitlement">
<resolver:Dependency ref="eduPersonEntitlement
Calculation 1" />
<resolver:Dependency ref="eduPersonEntitlement
Calculation 2" />
<resolver:Dependency ref="eduPersonEntitlement
Calculation 3" />
<resolver:Dependency ref="eduPersonEntitlement
Calculation 4" />
<DefaultValue>https://www.example.com/foobar
</DefaultValue>
<ValueMap>
<ReturnValue>https://www.example.com/superstar
</ReturnValue>
<SourceValue>eduPersonEntitlement Calculation
1</SourceValue>
<SourceValue>eduPersonEntitlement Calculation
2</SourceValue>
<SourceValue>eduPersonEntitlement Calculation
3</SourceValue>
<SourceValue>eduPersonEntitlement Calculation
4</SourceValue>
</ValueMap>
<resolver:AttributeEncoder xsi:type="SAML2String"
xmlns="urn:mace:shibboleth:2.0:attribute:encoder"
name="urn:mace:dir:attribute-def:final"
friendlyName="final" />
</resolver:AttributeDefinition>
On Fri, Nov 13, 2015 at 10:43 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 11/13/15, 1:14 PM, "users on behalf of Joel Levin" <
> users-bounces at shibboleth.net on behalf of joel.aaron.levin at gmail.com>
> wrote:
>
>
>
> >Is it possible for 'AttributeDefinition' to have multiple 'Dependency' &
> 'sourceAttributeID'?
>
> There is no single semantic for source attribute (and it's often broken
> for many). You're going to have to ask about a specific attribute
> definition type.
>
> Any plugin can have multiple dependencies.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151113/434a511c/attachment-0001.html>
More information about the users
mailing list