Using isMemberof Attribute to release specific group membership

[Cantor, Scott]

On 3/30/16, 2:04 PM, "users on behalf of Michael Richter" <users-bounces at shibboleth.net on behalf of mrichter at coastal.edu> wrote:



>Thanks for the tips so far.  I think I'm on the right track, but need a little assist.
>In the attribute rule below It's checking for memberships in Staff and CSCI.

No, I don't know what that's doing. I think you're telling it to release a value only if it matches both of those values, which is completely impossible.

The logic you're trying to build belongs in the PolicyRequirement. The thing that tells it when to apply the attribute rules in the policy.

-- Scott