Shibboleth idp4 and authorization only to some Windows AD group.

Josef Karliak karliak at fnhk.cz
Thu Mar 4 06:37:59 UTC 2021


  Good morning, 

  on old shibboleth idp2 we used to allow users only in some Windows AD
group to authorize, is it able too in shibboleth idp 4 ? 

  On v2 : 

authorizationFilter="(memberOf=CN=IDP_Group,CN=Users,DC=domain,DC=local)"

  I could not find it how to do that in idp4 

  Thanks and best regards 

  J.Karliak

-- 
Bc. Josef Karliak 
Správa sítě a elektronické pošty
Fakultní nemocnice Hradec Králové
Odbor výpočetních systémů
Sokolská 581, 500 05 Hradec Králové
Tel.: +420 495 833 931, Mob.: +420 724 235 654
e-mail: josef.karliak at fnhk.cz, http://www.fnhk.cz  
XMPP/Jabber : chosinek at jabb.im
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210304/cc4ca6d1/attachment.htm>


More information about the users mailing list