Filtering an attribute that contains JSON with more attributes

[Etienne Dysli-Metref]

I'd like to get an idea of the feasibility of implementing the following
in the attribute filtering stage of the IdP...

The attribute resolver returns one attribute that contains a JSON
object. Keys inside this object are "usual" attribute names (say from
the eduPerson schema). I'd like to filter these key/value pairs just
like other attributes returned by the resolver.

I see that I have the possibility of writing a script [1] to process the
JSON there, but would it be possible to feed the "attributes" found
inside the JSON object into the filtering engine itself, so it would use
the same rules as the other normal attributes? It doesn't have to be
JavaScript, I'm prepared to write Java code to make this happen. :)

I'm not detailing the reasons behind this idea now, but if there's
interest I can.

  Etienne

[1] https://wiki.shibboleth.net/confluence/display/IDP30/ScriptConfiguration

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20161214/43139458/attachment-0001.sig>