Referencing entity attributes in the terms of use key bean

[Wessel, Keith]

Thanks, Scott and Peter. I'm understanding the pieces but am not entirely sure how to string them together to put them into something workable. And Scott, unfortunately, I can't go with a regex because, of course, the powers that be only want this applying to Github orgs used for courses, not for everything. If they wanted to make this simple, I wouldn't be asking this question in the first place.

So, let me ask a couple of specific questions and see if that gets me headed in the right direction.

What should the class attribute be for the shibboleth.consent.terms-of-use.Key bean definition? Could it it still use com.google.common.base.Functions? Or should I use something more like the scripted beans in the MFA configuration?

    <bean id="shibboleth.consent.terms-of-use.Key" parent="shibboleth.ContextFunctions.Scripted" factory-method="inlineScript"

I understand that I need to use the predicate to check if the entity attribute tag/value match certain specified values (and yes, Scott, you're correct that I don't need to pull out the value to use it, just match against it). I should put that predicate inside my scripted function, using an if statement to compare the tag and value to the expected values, correct? And either return, as a string, my special Github terms-of-use key or else the SP's entityID.

I think this makes sense, but I just want to make sure I'm barking up the right tree.

Thanks,
Keith

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Thursday, September 10, 2020 10:44 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Referencing entity attributes in the terms of use key bean

I would add that simply listing entityIDs or applying a regex makes a lot more sense to me here though.

-- Scott



-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net