IdP Authorization

Klingenstein, Nate nklingenstein at calstate.edu
Tue Jan 31 15:25:49 EST 2017


Joel,

Please try the SimpleAttributePredicate here:

https://wiki.shibboleth.net/confluence/display/IDP30/ContextCheckInterceptConfiguration

Hope this helps,
Nate.

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Joel Levin
Sent: Tuesday, January 31, 2017 11:56 AM
To: Shib Users <users at shibboleth.net>
Subject: IdP Authorization

We have a high asset application that mgmt does not want any attributes sent if the user does not have a particular eduPersonEntitlement - i.e. stop the workflow directly on the IdP.
V3 allows this from what I previously read -- searching the wiki-- can anyone point me to the place where documented (if available)?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170131/b6b7f487/attachment.html>


More information about the users mailing list