Handling expired/expiring users after upgrading from Shib 3 to Shib 4
cantor.2 at osu.edu
Wed Jun 21 16:11:03 UTC 2023
Another point I guess...4.3 adds an explicit DateTimeAttributeDefinition, which "isolates" the whole mess of converting inside the resolver and is perhaps a bit easier to play/debug with (e.g. aacli and reloading). That gets you a standard Instant out that the relevant predicate(s) will operate against without having to do the conversion there.
I haven't done that switch myself but I added that so it's an option.
More information about the users