<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span>I am running a Shib SP (2.3.1) and they are running the NAM IDP (no idea of the version). I am just trying to get a simple entitlement value in the entitlement attribute based on the user's role. They are trying to figure out how to get an acceptable value into this attribute. So far they have managed to pass some LDAP fields as a string something like this:</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="background-color:
transparent;"><span>cn=Staff_Accounts,ou=Groups,o=ExampleValueu;cn=ustaff,ou=Groups,o=ExampleValueu;cn=Request_Tracker,ou=Groups,o=ExampleValue;cn=CSD,ou=Groups,o=ExampleValueu;cn=IT_StrategicPlanning_Share,ou=ManagedGroups,ou=Groups,o=ExampleValueu;cn=IT_Steering_Share,ou=ManagedGroups,ou=Groups,o=ExampleValue<br></span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; font-style: normal;"><span><br></span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; font-style: normal;"><span>That will not fly for my side of the application. Just looking to figure out some rule on the IDP (or whatever config has to happen...) to send a value of say 'lyndaaccess' / 'nolyndaaccess' as the entitlement so that I can filter access based on the value.</span></div><div style="background-color: transparent;
color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; font-style: normal;"><span><br></span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; font-style: normal;"><span>Thanks!</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> David Gersic <dgersic@niu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, October 2, 2013 11:23 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Novell Netiq - Anyone
have any experience with this IDP?<br> </font> </div> <div class="y_msg_container"><br>>>> On 10/2/2013 at 11:18 AM, Mike Flynn <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote: <br>> Thank you, David. We connect and everything passes fine except for the <br>> entitlement - That passes to us as well. The issue is how the value for <br>> entitlement is set on the IDP. That's what we need to pin down :)<br><br>Can you re-phrase this as a question?<br><br>Not clear to me:<br><br>1. Are you running the SP or the IdP?<br>2. Is the SP Shibboleth or NAM?<br>3. Is the IdP Shibboleth or NAM?<br>4. What sort of entitlement are you trying to pass? How?<br><br>Additionally, what versions (Shib, NAM) are being used here?<br><br><br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net"
href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>