IdP - EntityAttributes - Predicate - Regex filter for federation SPs

Cantor, Scott cantor.2 at osu.edu
Tue Apr 24 10:29:58 EDT 2018


> But now our idp is joining EduGain and i am looking for a mechanism to simply
> and flexible check if the sp (the user wants to login) is in edugain or not.
> I did not want to extend the list of registration authorities and i did not want
> to "mark" our local sp and using "InEntityGroup" is also no possibility.

I would personally mark your local SPs, there are a lot fewer of them. Adding a tag to every EduGAIN entity is a ton of expensive work in time and memory, at least until you're looking up metadata per entity.

> Among other questions came up i now want to know if it is possible to use
> regex for this task?

You already found it, it's part of that Candidate class you're already wiring up.

-- Scott



More information about the users mailing list