The above suggestions should help me greatly.<br><br>We current release "member" as the affiliation to all service providers for our staff and student users that have a suitable status in our back-end db table which is an allowed configuration within the UKFederation we belong to.<br>
Some service providers would like us to release a more specific value but we don't want to break our working configuration for existing service provider mid academic year by suddenly releasing difference affiliations to them even if it should just work.<br>
<br>Its interesting to see how people are manipulating attribute data to meet the weird and wonderful situations we ourselves in sometimes.<br><br> <br><br>
<div class="gmail_extra"><br><br><div class="gmail_quote">On 14 November 2012 20:28, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Ortner Nikolaus <<a href="mailto:N.Ortner@fh-kaernten.at">N.Ortner@fh-kaernten.at</a>> [2012-11-14 21:20]:<br>
<div class="im">> > Yes, that's probably a better solution for what the original poster wanted.<br>
> > In our specific case, we're mapping the (student, faculty, staff) values to an<br>
> > attribute value "member". Sometimes we might want student mapped to<br>
> > member, and sometimes not. Is there a way we could do that in the filter<br>
> > alone?<br>
><br>
> Do I read this correctly? - a "student" is not always also a "member" in your setup?<br>
> [a person in good standing with the institution?]<br>
<br>
</div>Indeed that's a requirement of the eduPerson specification. There<br>
might still be reasons for an IdP to not release all applicable values<br>
to a given SP.<br>
<span class="HOEnZb"><font color="#888888">-peter<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>John<br>
</div>