group in CAS service definition of CASServiceRegistry

Michael Grady mgrady at unicon.net
Fri Jun 3 13:43:40 UTC 2022



> On Jun 3, 2022, at 7:26 AM, Cantor, Scott via users <users at shibboleth.net> wrote:
> 
>>   It seems the group in CAS service definition of CASServiceRegistry cannot be used in InEntityGroup type of
>> policy rule in AttributeFilterConfiguration.  I can’t group related CAS services definition in this way to have the
>> same attribute release policy.  Is it not implemented or a bug?


And what causes you to think the above? We've used the

  <PolicyRequirementRule xsi:type="InEntityGroup" groupID="CAS_groupname_from_registry" />

quite a bit in the attribute-filter file, and if it has stopped working, there sure haven't been any reports of such. 

--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220603/7d9bf462/attachment.htm>


More information about the users mailing list