Grouper Users - Open Discussion List

[Tom Barton <>]

 wrote:
> I've got to admit, tho, that I'm still not clear about the desired 
> properties of searchSubject and searchSubjectByIdentifier ....  how does 
> one choose which ldap attributes to use for each of them? Do browser 
> users ever see either one? or are they always internal?

The Subject API v0.2.1 wiki page has this to say:

--

The "getSubject" method is used to select a specific subject from the 
back-end identity store, for example, to show the name and department of 
a person belonging to a group.

The "getSubjectByIdentifier" method enables identifying a subject by 
means of a column or attribute different from that used as the 
subjectId. For example, if a UI user authenticates with a loginId, but 
the subjectId is an opaque registryId, this method is used to identify 
the subject given their loginId.

The "search" method is used to help a UI user select the subject they 
want from a list. It is typically implemented as a substring search on 
several non-identifying columns or attributes such as lastname, 
firstname, and department. The results of a search are displayed in a 
checkbox list to the UI user.

--

That follows a table associating these 3 subject API interface methods 
with their declaration syntax in the sources.xml file.

Read all about subject v0.2.1 at 
<https://wiki.internet2.edu/confluence/display/i2miCommon/subject-0.2.1-doc>, 
which is linked in to the Grouper "API Configuration" page of the 
Grouper documentation at located 
<https://wiki.internet2.edu/confluence/display/GrouperWG/Grouper+Product>.

Tom