Grouper Users - Open Discussion List

[Scott Koranda <>]

> >I am attempting now to extend the MemberDataConnector to
> >include filtering.
 
Got it.

For the archives, I edited psp-resolver.xml and changed

  <resolver:AttributeDefinition
    id="memberIsMemberOf"
    xsi:type="grouper:Group"
    sourceAttributeID="groups">
    <resolver:Dependency ref="MemberDataConnector" />
    <grouper:Attribute id="name" />
  </resolver:AttributeDefinition>

to be (just changed the id value)

  <resolver:AttributeDefinition
    id="memberIsMemberOfUnfiltered"
    xsi:type="grouper:Group"
    sourceAttributeID="groups">
    <resolver:Dependency ref="MemberDataConnector" />
    <grouper:Attribute id="name" />
  </resolver:AttributeDefinition>

and then added

  <resolver:AttributeDefinition
    id="memberIsMemberOf"
    xsi:type="Mapped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
    sourceAttributeID="name">
    <resolver:Dependency ref="memberIsMemberOfUnfiltered" />
    <ValueMap>
        <ReturnValue>$1</ReturnValue>
        <SourceValue>(^My\sStem:.+)</SourceValue>
    </ValueMap>
  </resolver:AttributeDefinition>

I am sure there are other ways of doing the same. Note that the above
uses the Mapped AttributeDefinition directly from the Shibboleth IdP 
V2 libraries/classes, upon which the PSP was built, so you can follow
the documentation at

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute

Thanks,

Scott K