eduPersonEntitlement Format

[Cantor, Scott]

On 4/3/17, 7:16 PM, "users on behalf of Brian Moon" <users-bounces at shibboleth.net on behalf of bmoon at scu.edu> wrote:

> Given the examples we've seen in this thread for Xfinity and the library service, do you all tend to find that you can work with the
> SP to agree on a string in the entitlement field that conforms to your standard, or are you finding that the SP will dictate a string
> that you must use?

There are exceedingly few applications that delegate authorization. Of the ones that exist, it's probaby slightly more common for them to be open to whatever value is chosen by the IdP because you're typically just configuring the application with the value to look for. As an application developer, that's a much simpler approach than caring what it is.

-- Scott