Skip to Content.
Sympa Menu

grouper-users - RE: [grouper-users] Exposing Groups Through Shibboleth

Subject: Grouper Users - Open Discussion List

List archive

RE: [grouper-users] Exposing Groups Through Shibboleth

Chronological Thread 
  • From: "Klug, Lawrence" <>
  • To: Tom Barton <>, "" <>
  • Subject: RE: [grouper-users] Exposing Groups Through Shibboleth
  • Date: Mon, 21 Nov 2011 13:13:27 -0800
  • Accept-language: en-US
  • Acceptlanguage: en-US



Thanks a lot!




From: [mailto:] On Behalf Of Tom Barton
Sent: Monday, November 21, 2011 12:08 PM
Subject: Re: [grouper-users] Exposing Groups Through Shibboleth


To expand a little on David's answer,


suggests config on the shib IdP to pull group info out of LDAP.

Your question might also have been motivated by


because Ldappcng uses the shib attribute resolver and so similar looking config resides in ldappc-resolver.xml.

Just to air things out a bit further, I'll note that there's also


which addresses the same needs first addressed by item 1, but using one or both of two new DataConnectors available to the shib IdP that provide group and membership info from grouper directly to the IdP.


On 11/21/2011 1:40 PM, David Langenberg wrote:

Looking @ the doc.  All the examples with '<resolver:' type XML are in attribute-resolver.xml.  The rest are attribute-filter.xml.





David Langenberg

Identity Management

The University of Chicago


From: "Klug, Lawrence" <>
Date: Mon, 21 Nov 2011 13:31:50 -0600
To: "" <>
Subject: [grouper-users] Exposing Groups Through Shibboleth


Looking at this admin guide:


Question:  Is this example configured on the Grouper side or the Shibboleth side?  What config file is shown  in the code  examples?


Our use case:   Configure  Shibboleth and Grouper to manage groups in Plone.  (Plone is a Zope-based open source CMS product).






Lawrence Klug

UCLA Middleware Services

Office: 310 825-2061

Cell: 818 667-2386


Archive powered by MHonArc 2.6.16.

Top of Page