group in CAS service definition of CASServiceRegistry

[Cantor, Scott]

On 6/5/22, 10:21 PM, "users on behalf of YF Lai" <users-bounces at shibboleth.net on behalf of ccyflai at ust.hk> wrote:

>    It seems checkAffiliations in InEntityGroup policy rule was the matter.   The rule will failure whatever
> checkAffiliations was set to true or false.   It works if this attribute is not present.

That's virtually impossible but it would be a bug if true. It may require a specific value (I don't recall), but absent and set to the default value would be equivalent.

-- Scott