eduPersonAssurance and postAuthContext principals scripted attribute

[Cantor, Scott]

On 7/30/20, 11:32 AM, "users on behalf of Mak, Steve" <users-bounces at shibboleth.net on behalf of makst at upenn.edu> wrote:

>    I'm currently looking for useful resources for how to build a script for this based on a users authContext principals, or
> maybe using an activation-condition for it. We don't have any value we can use in our IdP DB.

https://wiki.shibboleth.net/confluence/display/IDP4/SubjectDerivedAttributeAttributeDefinition

Use the attributeValuesFunctionRef hook to inject a script that just checks for the relevant type of Principal and value and builds the values to return. The function/script will be called for every Principal.

-- Scott