Geolocation attribute

[Yavor Yanakiev]

Yes, it's their responsibility and in a perfect world they should take care
about this issue, but ... reality is different.

In addition to the Apporto.com case, since NYU is literally spread
globally, there can be other use-cases. Though we use Duo, Rich Graves
approach can be used for on-the-fly warning/preventing system. Few months
ago we had several unsuccesful login attempts from North Korea which could
of been simply blocked.

Again, we simply exploring this option at the moment and we need the wisdom
of the Shibboleth community.

On Fri, Apr 21, 2017 at 5:07 AM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Yavor Yanakiev <yavor at nyu.edu> [2017-04-21 05:02]:
> > We just started a pilot use of http://apporto.com and since the
> > software licenses can be different in each country, we need to know
> > where the particular user is.
>
> Shouldn't authorization be the resource owners responsibility?
> It's not like they don't see the client IP address (or HTML5
> geolocation) themselfs.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Yavor Yanakiev
Systems Developer for Identity Services
212-992-7585 <(212)%20992-7585>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170421/13899e80/attachment.html>