Skip to Content.
Sympa Menu

grouper-users - Re: [grouper-users] Exposing Groups Through Shibboleth

Subject: Grouper Users - Open Discussion List

List archive

Re: [grouper-users] Exposing Groups Through Shibboleth

Chronological Thread 
  • From: Tom Barton <>
  • To:
  • Subject: Re: [grouper-users] Exposing Groups Through Shibboleth
  • Date: Mon, 21 Nov 2011 14:07:37 -0600

To expand a little on David's answer,


suggests config on the shib IdP to pull group info out of LDAP.

Your question might also have been motivated by


because Ldappcng uses the shib attribute resolver and so similar looking config resides in ldappc-resolver.xml.

Just to air things out a bit further, I'll note that there's also


which addresses the same needs first addressed by item 1, but using one or both of two new DataConnectors available to the shib IdP that provide group and membership info from grouper directly to the IdP.


On 11/21/2011 1:40 PM, David Langenberg wrote:
Looking @ the doc.  All the examples with '<resolver:' type XML are in attribute-resolver.xml.  The rest are attribute-filter.xml.


David Langenberg
Identity Management
The University of Chicago

From: "Klug, Lawrence" <>
Date: Mon, 21 Nov 2011 13:31:50 -0600
To: "" <>
Subject: [grouper-users] Exposing Groups Through Shibboleth

Looking at this admin guide:


Question:  Is this example configured on the Grouper side or the Shibboleth side?  What config file is shown  in the code  examples?


Our use case:   Configure  Shibboleth and Grouper to manage groups in Plone.  (Plone is a Zope-based open source CMS product).






Lawrence Klug

UCLA Middleware Services

Office: 310 825-2061

Cell: 818 667-2386


Archive powered by MHonArc 2.6.16.

Top of Page