resolving attribute based on ACS URL
Andrew Morgan
morgan at orst.edu
Fri Mar 31 14:01:46 EDT 2017
We have requests to enable SAML authentication for multiple Slack
instances. Slack's documentation gives these parameters for configuring
the IDP:
- SSO post-back URL (also known as the Assertion Consumer Service URL):
https://yourteamname.slack.com/sso/saml
- Entity ID: https://slack.com
Since there would be multiple integrations using the same entityID, I'm
looking for another method to handle attribute release and authorization
(an intercept to block access if the user is not a member of a particular
group).
Is it possible to use the ACS URL provided in the SAML authn request as a
condition in attribute resolution?
Are there other ways to approach this problem?
Thanks,
Andy
More information about the users
mailing list