<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>They supply their metadata to me via a URL: </span><a href="https://idpstarid.mnscu.edu/idp/profile/Metadata/SAML">https://idpstarid.mnscu.edu/idp/profile/Metadata/SAML</a></div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; ">Is there a simple change I can ask them to do on their side to fix this?</div><div><br></div> <div style="font-size: 12pt; font-family: arial, helvetica, sans-serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users
<users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, September 27, 2012 8:11 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: passing eduPersonScopedAffiliation question.<br> </font> </div> <br>
On 9/27/12 10:55 AM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br>><br>>I am indeed federating one on one. What kind of filter rule would I need<br>>to define for this?<br><br>It depends how you're managing their metadata.<br><br>If you're hand-crafting it, you could add the Scope extension to their<br>metadata (see plenty of examples in various federation metadata files).<br><br>If not and you want to keep the rule serparate, you'd need to go add new<br>filtering policy rules to your file to explicitly allow that scope for<br>this one issuer. I think you'd also have to turn off the scope filtering<br>from the metadata for that issuer or it would just trump the new rule.<br>It's a lot of tinkering.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net"
href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>