Geolocation attribute

[David Langenberg]

Agreed – that the vendor is asking you to supply an attribute seems to indicate flexibility in this area, else they could just do the lookup.  Leaving aside what hopping on the campus VPN would do to this scheme, you could certainly work something up scripted.  Though, I think if I was doing this, I’d make my own DataConnector for the lookup service rather than try to do it in the attribute definition.

Dave 

-- 
David Langenberg
Asst Director, Identity Management
The University of Chicago

On 4/21/17, 4:07 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

    * Yavor Yanakiev <yavor at nyu.edu> [2017-04-21 05:02]:
    > We just started a pilot use of http://apporto.com and since the
    > software licenses can be different in each country, we need to know
    > where the particular user is.
    
    Shouldn't authorization be the resource owners responsibility?
    It's not like they don't see the client IP address (or HTML5
    geolocation) themselfs.
    -peter
    -- 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
    
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5202 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20170421/82794dbc/attachment.p7s>