<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In answer to the specific VLE use case, I would have thought that managing enrolements is better done using a database. Our VLE (moodle) can get enrolment information
from our MIS system – we havent’ set it up to be totally seamless, but the server can at least see lots of information on students, what courses they’re in, etc, and has plugins setup to make use of this for synchronising users onto courses/modules.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Dave<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">_________________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">Dave Perry<br>
eLearning Technologist, Hull College Group<br>
<br>
Room L34 - Queens Gardens Library<br>
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG<br>
Extension 2230 / Direct Dial 01482 381930<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">* Need a fast reply? Try
<a href="mailto:elearning@hull-college.ac.uk">elearning@hull-college.ac.uk</a> *<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Phil Lello<br>
<b>Sent:</b> 11 April 2015 17:03<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Extending the IdP to release a list of all permitted users for a SP.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:36.0pt"><o:p> </o:p></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
Hi all,<o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
I'm relatively new to Shibboleth, and my interest was originally sparked by integration issues between a SP and IdP controlled by the same university.<o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
I'm wondering if it would make sense to add an extension to the IdP that allowed a SP to request that an IdP return attributes for all users that the IdP wants to be able to use a given SP. I tried searching the archives, but either my search terms were bad,
or this topic hasn't come up before.<br>
<br>
On the face of it, this seems to be desirable, since the IdP already takes care of combining and filtering attributes, possibly from multiple sources, and duplicating this process elsewhere is more maintenance.<o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
The generic use case is to allow application permissions on a SP to be set up before an IdP user interacts with it for the first time. The more specific use case is for a VLE/LMS (SP) to be able to query the IdP for active enrolments in modules, so that a course
administrator can see a list of enrolled students, even if they haven't logged in.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
Has this been discussed before? Is it desirable, or are there good reasons why this shouldn't be an option for a relying party?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:36.0pt">
Best wishes,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-left:36.0pt">Phil Lello<o:p></o:p></p>
</div>
</div>
</div>
<div><hr /></div><div><font color="#999999" size="2"><font face="Arial">This message is sent in confidence for the addressee </font><span style="font-family: Arial;">only. It may contain confidential or sensitive </span><span style="font-family: Arial;">information. The contents are not to be disclosed </span><span style="font-family: Arial;">to anyone other than the addressee. Unauthorised </span><span style="font-family: Arial;">recipients are requested to preserve this </span><span style="font-family: Arial;">confidentiality and to advise us of any errors in </span><span style="font-family: Arial;">transmission. Any views expressed in this message </span><span style="font-family: Arial;">are solely the views of the individual and do not </span><span style="font-family: Arial;">represent the views of the College. Nothing in this </span><span style="font-family: Arial;">message should be construed as creating a contract.</span></font></div><div><font face="Arial" color="#999999" size="2"><br /></font></div><div><font face="Arial" color="#999999" size="2">Hull College owns the email infrastructure, including the contents.</font></div><div><font face="Arial" color="#999999" size="2"><br /></font></div><div><font face="Arial" size="2" color="#00cc33">Hull College is committed to sustainability, please reflect before printing this email.</font></div><div><hr /></div>
</body>
</html>