Scripted Modification to eduPersonAffiliation

[Michael Dahlberg]

I have a problem with the requested values for eduPersonAffiliation with
two of the SPs that I work with: one wants the value 'member' in place of
the values 'student', 'staff', 'faculty', and 'employee'; and one wants the
actual values.

I've read
https://www.internet2.edu/media/medialibrary/2013/09/04/internet2-mace-dir-eduperson-201203.html#eduPersonAffiliation
and
it looks like ePA is a multi-valued attribute so it should be permissible
for the ePA to have the value 'member' and 'student'.  I was thinking that
could be done with a scripted attribute.  With that in mind, I have three
questions:

(1) I've looked for some documentation on the scripting engine within the
IdP and there does not look like there is much.  Other than that found in
https://wiki.shibboleth.net/confluence/display/IDP30/ScriptedAttributeDefinition,
would you be able to point me in the direction of some
examples/descriptions of the functions?

(2) From the examples in the default attribute-resolver.xml file, it looks
like the add("") function overwrites the existing values.  Does the
addValues("") function append a value to the existing value?

(3) If ePA is multi-valued, what would the resulting attributes be for
eduPersonScopedAffiliation:  (student,member at example.edu) or (
student at example.edu,member at example.edu)?

Thanks for the assistance.

Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180103/69341a01/attachment.html>