Restricting federations

[Cantor, Scott]

On 2/23/19, 1:20 PM, "users on behalf of Tim Murphy" <users-bounces at shibboleth.net on behalf of tim.murphy at ichec.ie> wrote:

> I'm not sure if it's possible to implement across an entire federation though?

There is no such thing as a "federation" in software terms, it's not a technical concept. The myriad range of things that can be operated on is endless and documented amongst the many standards, schemas, metadata in production, etc. None of them is "federation". The closest is "RegistrationAuthority", which is in one of the metadata extensions we support and have policies for attribute filtering and predicates over.

-- Scott