<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>Thanks, Keith. Unfortunately, Most of the euro folks that I am dealing with on this do not support that attribute. I wish they did.</span></div><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> Keith Hazelton <hazelton@wisc.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, May 14, 2013 10:39 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: School me on hub and spoke federations<br> </font> </div> <div
class="y_msg_container"><br>Mike,<br><br>On May 14, 2013, at 12:31 , "Cantor, Scott" <<a ymailto="mailto:cantor.2@osu.edu" href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br><br>>> Typical for us is a 1 year contract for access to all services for a given<br>>> institution.<br>> <br>> I don't see how that's not identifying the contract rather than the university. Identifying contracts seems to work regardless.<br>> <br>> -- scott<br><br>That is, each person from that institution could carry an eduPersonEntitlement value in their SAML assertions to your SPs that your SPs would be able to map one-to-one to the appropriate contract. Same entitlement value for all individuals coming from that IdP in the case you describe. --Keith<br>________________<br>> <br>> <br>> --<br>> To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net"
href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>