Skip to Content.
Sympa Menu

grouper-dev - Re: [grouper-dev] secure Shibboleth - Grouper integration

Subject: Grouper Developers Forum

List archive

Re: [grouper-dev] secure Shibboleth - Grouper integration

Chronological Thread 
  • From:
  • To: Grouper Dev <>
  • Subject: Re: [grouper-dev] secure Shibboleth - Grouper integration
  • Date: Fri, 4 Sep 2009 13:49:25 -0400

At 10:04 AM -0700 9/4/09, Brendan Bellina wrote:
One possible issue that comes to mind regarding uApprove is that the attributes and even values shown by uApprove may not mean very much to the user. For example, our group dn's and entitlements as well are based on opaque identifiers. So showing a user a list of isMemberOf values or ePAs and asking them to approve which ones can be released to an SP isn't really going to be very helpful. uApprove would need to query for additional information about the groups and display that information in its interface or we would need to provide some kind of mapping document and expect the user to take the time to look them up before responding, and that isn't likely. It isn't as simple as releasing a phone number or an email address, for which little or no explanation would be required.

Brendan -- thanks for the comments!

at this point, uApprove is consider to be an "experimental extension". It is considered to have great promise, however.

At this point, the Shib team would strongly encourage sites to install uApprove (into their dev environments?), begin to experiment with it, and provide feedback on how to make it better.....

I think Brendan's list is a very good start.....

What do others think ?

... and could uApprove be at all relevant to Chris' original questions ?

Archive powered by MHonArc 2.6.16.

Top of Page