How to make IDP "site sensitive" for eduPersonPrimaryAffiliation

Cantor, Scott cantor.2 at osu.edu
Tue Nov 17 15:23:49 EST 2015


On 11/17/15, 3:20 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net on behalf of ndk at internet2.edu> wrote:



>For IdPv3, there are more options available to you, but it’ll still take some configuration or implementation work because there’s such variety in these scenarios.

There's no implementation work required, V3 includes an intercept flow called a "context-check" and an example  condition bean that can check for attributes and values before issuing responses.

There is no documentation on it yet, it's backlogged. I'm sure there are previous threads about it and somebody using it could provide an example beyond the one in the default files.

>https://wiki.shibboleth.net/confluence/display/IDP30/AuthenticationConfiguration#AuthenticationConfiguration-FlowCancellation

That's not related to this use case.

-- Scott



More information about the users mailing list