<div dir="ltr"><div>In my case, the SP is the juniper SSL vpn and i can't find a good way to match a valid group...</div><div><br></div><div>it seems that the juniper take the multi valued MemberOf returned by shibboleth idp for a single group :/<br></div><div><br></div><div>Anyway, i will try to do some regex expression to match the group in juniper.</div><div><br></div><div>Thanks a lot</div></div><div class="gmail_extra"><br><div class="gmail_quote">2015-01-16 16:23 GMT+01:00 Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> I would like to know if it's possible to configure the separator for multi valued<br>
> attributes like MemberOf.<br>
<br>
</span>There is no separator. Multiple values are multiple values.<br>
<span class=""><br>
> I'm trying to configure rules on juniper but when i see in my juniper debug<br>
> log the MemberOf attribute supplied by shibboleth idp look like this :<br>
> MemberOf = "group1 group2 group3"<br>
<br>
</span>Not unless you make it do that in some weird way, or the values aren't separate in the first place. Multiple LDAP values are returned as multiple values and maintained as multiple values throughout.<br>
<br>
If you're talking about the SP, then that's something else entirely.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Armando Martins<br></div>
</div>