Forcing Duo by Service Provider

[Cantor, Scott]

On 3/29/17, 8:57 PM, "users on behalf of Michael A Grady" <users-bounces at shibboleth.net on behalf of mgrady at unicon.net> wrote:

> That does bring up the question -- can one access that CAS group name in the attribute-resolver, and if so, as what?

I believe that the CAS group information is embedded in the same way the SAML group information is handled, with a sort of "annotation" of information to the EntityDescriptor node in the metadata instance. If that's true, it's an object of type org.opensaml.saml.metadata.EntityGroupName inside a collection that's attached to the EntityDescriptor and accessed via XMLObject.getObjectMetadata

-- Scott