NameID as a Function of RP

[Marvin Addison]

On Mon, Jul 11, 2016 at 9:09 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> You can put the conditional in either the resolver or in the generator
> bean as an activation condition


Thanks Scott, that was very helpful. Since both since the source attribute
and name ID generator apply exclusively to Google, I used a common
activation condition reference in both places. The following wiki page had
all the examples I needed:

https://wiki.shibboleth.net/confluence/display/IDP30/ActivationConditions

I learned an important fact from this exercise: you can attach activation
conditions to attribute definitions. I'm planning to make healthy use of
that to disable our wonky vendor-specific scripted attribute definitions
that don't apply to anybody but those vendors. That will be a healthy
optimization to avoid running the scripting engine except where needed.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160712/68715756/attachment.html>