Linkedin learning

[Cantor, Scott]

On 7/31/19, 9:58 AM, "users on behalf of Yavor Yanakiev" <users-bounces at shibboleth.net on behalf of yavor at nyu.edu> wrote:

> This is exactly what we did two weeks ago, but it didn't work. The LinkedIn engineer said they need to work on the
> problem. My guess is, the value of the entitlement  was not handle properly, since it is -
> urn:mace:nyu.edu:entl:its:lynda

Mine is even uglier, though it is a URL. I really think they're just string matching though. Mine does have a colon in it and that still works, so I don't think it's an escaping issue.

Nevertheless, there's a reason we implemented authz in the IdP for people, it's trivial to do it there too in the interim.

At the end of the day, people need to pick their battles and recognize that this thing is as good as it gets. If you think this is bad, you are in for a rude awakening very shortly.

-- Scott