Using isMemberof Attribute to release specific group membership

Michael Richter mrichter at coastal.edu
Wed Mar 30 15:12:28 EDT 2016


That was it!  Thanks!!!!

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Wednesday, March 30, 2016 3:10 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Using isMemberof Attribute to release specific group membership

On 3/30/16, 3:06 PM, "users on behalf of Michael Richter" <users-bounces at shibboleth.net on behalf of mrichter at coastal.edu> wrote:



>So something more like this:
>
><PolicyRequirementRule xsi:type="AND">
>			<Rule xsi:type="Requester" value="https://e5.onthehub.com" />
>			<Rule xsi:type="AttributeValueString" attributeID="isMemberOf" value="CN=Staff,OU=Groups,DC=coastal"/>
>        </PolicyRequirementRule>
>
> 
>When I try to start the IDP I get:
>Cannot resolve 'AttributeValueString' to a type definition for element 'Rule'

Because you're using the 3.2+ collapsed namespace, and the rule name there is just "Value" IIRC. The docs were all updated to reflect the updated names.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list