CAS protocol attribute release
Kevin Foote
kpfoote at uoregon.edu
Mon Feb 22 18:55:21 EST 2016
> On Feb 22, 2016, at 3:41 PM, Walter Forbes Hoehn (wassa) <wassa at memphis.edu> wrote:
>
> You use the standard attribute filter (attribute-filter.xml). The only tricky bit is that the “attribute requester” can vary depending on the configuration of the CAS client. In that case, you’ll need to do something like this:
>
> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterRegex" regex="^https://foo.test.edu/.*$" />
Doesn’t it obey this as well? I don’t have any CAS clients that need / use attributes (yet or hopefully ever)..
So this is just me thinking.. not tested :)
<afp:PolicyRequirementRule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="uolocal-cas-services" />
Assuming a local CAS ServiceDefinition bean with the following.
p:group=“uolocal-cas-services"
--------
thanks
kevin.foote
More information about the users
mailing list