<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p> Good morning,</p>
<p> on old shibboleth idp2 we used to allow users only in some Windows AD group to authorize, is it able too in shibboleth idp 4 ?</p>
<p> On v2 :</p>
<p><span>authorizationFilter="(memberOf=CN=IDP_Group,CN=Users,DC=domain,DC=local)"<br /></span></p>
<p><br /></p>
<p><span> I could not find it how to do that in idp4</span></p>
<p><span> Thanks and best regards</span></p>
<p><span> J.Karliak</span></p>
<div id="signature">-- <br />
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Bc. Josef Karliak <br />Správa sítě a elektronické pošty<br />Fakultní nemocnice Hradec Králové<br />Odbor výpočetních systémů<br />Sokolská 581, 500 05 Hradec Králové<br />Tel.: +420 495 833 931, Mob.: +420 724 235 654<br />e-mail: <a href="mailto:josef.karliak@fnhk.cz">josef.karliak@fnhk.cz</a>, <a href="http://www.fnhk.cz" target="_blank" rel="noopener noreferrer">http://www.fnhk.cz</a> <br />XMPP/Jabber : <a href="mailto:chosinek@jabb.im">chosinek@jabb.im</a></div>
</div>
</body></html>