Filter attribute release depending on CAS service groups

[David Huebner]

Hi all,

I am looking for a way to restrict attribute release for groups of CAS 
services.
So lets say I have the following CAS service registry definition:

<bean class="net.shibboleth.idp.cas.service.ServiceDefinition"
   c:regex="https://example.*"
   p:group="institutional-services"
   p:authorizedToProxy="false"
   p:singleLogoutParticipant="true"/>

I am looking for a way to access the group institutional-services in an 
attribute filter rule.

InEntityGroup does not seem to work and RequesterRegex does seem to have 
the problem, that it potentially also applies to all SAML SPs with such 
an entityID.

Cheers,
David