Grouper Users - Open Discussion List

[Tom Barton <>]

To expand a little on David's answer,

1. https://spaces.internet2.edu/display/Grouper/Exposing+Groups+Through+Shibboleth

suggests config on the shib IdP to pull group info out of LDAP.

Your question might also have been motivated by

2. https://spaces.internet2.edu/display/Grouper/LDAPPCNG

because Ldappcng uses the shib attribute resolver and so similar looking config resides in ldappc-resolver.xml.

Just to air things out a bit further, I'll note that there's also

3. https://spaces.internet2.edu/display/Grouper/Grouper+and+Shibboleth+Integration

which addresses the same needs first addressed by item 1, but using one or both of two new DataConnectors available to the shib IdP that provide group and membership info from grouper directly to the IdP.

Tom

On 11/21/2011 1:40 PM, David Langenberg wrote:

Looking @ the doc.  All the examples with '<resolver:' type XML are in attribute-resolver.xml.  The rest are attribute-filter.xml.

Dave

-- 

David Langenberg

Identity Management

The University of Chicago

From: "Klug, Lawrence" <>
Date: Mon, 21 Nov 2011 13:31:50 -0600
To: "" <>
Subject: [grouper-users] Exposing Groups Through Shibboleth

Looking at this admin guide:

 

https://spaces.internet2.edu/display/Grouper/Exposing+Groups+Through+Shibboleth

 

Question:  Is this example configured on the Grouper side or the Shibboleth side?  What config file is shown  in the code  examples?

 

Our use case:   Configure  Shibboleth and Grouper to manage groups in Plone.  (Plone is a Zope-based open source CMS product).

 

Thanks,

 

Lawrence

 

Lawrence Klug

UCLA Middleware Services

Office: 310 825-2061

Cell: 818 667-2386