<div dir="ltr">Thanks.  I have to study the excellent Nate doc on Box<div><br><a href="https://spaces.internet2.edu/display/NetPlusIDG/BoxIDG" target="_blank" style="font-family:arial,sans-serif;font-size:12.6666669845581px">https://spaces.internet2.edu/display/NetPlusIDG/BoxIDG</a><br></div><div><br></div><div>but I have a feeling we&#39;re going to need to proactively </div><div>&quot;provision/deprovision accounts&quot; in Box (which we certainly hoping</div><div>to avoid) with all that entails.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 30, 2014 at 4:19 PM, Peter Schober <span dir="ltr">&lt;<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Gary Chapman &lt;<a href="mailto:gary.chapman@nyu.edu">gary.chapman@nyu.edu</a>&gt; [2014-10-30 21:15]:<br>
<span class="">&gt; Thanks, Scott.  I&#39;m unclear what you meant by &quot;don&#39;t have authorization<br>
&gt; support unless you don&#39;t auto-provision&quot;...  it&#39;s that double negative<br>
&gt; that&#39;s getting me!<br>
<br>
</span>Actually it&#39;s a tripple negative (&quot;unless&quot; == if not), so you can get<br>
authorization at that SP only if you don&#39;t auto-provision, i.e., you<br>
provision only those you want to be authrorized for the service.<br>
<span class="HOEnZb"><font color="#888888">-peter<br>
</font></span><div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>