releasing AD group names

[Bruce Timberlake]

That seems like something the SP should be able to do if they can't consume
the attributes as they are natively released...
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065334474/TransformAttributeResolver
comes to mind?

Caveat - I am replying more on my understanding of how it should work than
on actual implementation experience/knowledge :)

-- 
*Bruce Timberlake*
*Sr Application Systems Administrator*, Identity and Access Management
Services
ITS - Information Assurance
University of Michigan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220408/dba9ca99/attachment.htm>