Using value maps for RBAC

Peter Schober peter.schober at univie.ac.at
Wed Nov 7 06:57:23 EST 2018


* Robert Duncan <Robert.Duncan at ncirl.ie> [2018-11-07 12:05]:
> Is there a way to use multiple source attributes in a value map?

Yes.

> I want to map roles to departments but I also want to map certain
> individuals to special roles,

You can also have multiple ValueMap elements within the same Mapped
AttributeDefinition.

The fine documentation covers all of that, cf. "Cardinality":
https://wiki.shibboleth.net/confluence/display/IDP30/MappedAttributeDefinition
(Easily found by entering "Mapped" in the search filed in the upper right.)

The example below also demonstrates that.

-peter


More information about the users mailing list