Grouper Users - Open Discussion List

[Scott Koranda <>]

Hi,

> What features do you use within PSP that are missing in PSPNG?

The PSP by its nature allows for finer grained control over how details
are provisioned. Because the PSP includes functionality from the
Shibboleth libraries one can configure sophisticated transformations on
the data before it is provisioned. I have used that functionality in a
couple of deployments to work around "interesting" challenges.

As a concrete example here is a snippet from a psp-resolver.xml file
that uses a regex to strip off a prefix from the group name before it is
provisioned as the value for the isMemberOf attribute on a person
record:

  <resolver:AttributeDefinition
    id="memberIsMemberOf"
    xsi:type="Mapped" xmlns="urn:mace:shibboleth:2.0:resolver:ad"
    sourceAttributeID="name">
    <resolver:Dependency ref="memberIsMemberOfUnfiltered" />
    <ValueMap>
        <ReturnValue>$1</ReturnValue>
        <SourceValue>(^My\sPrefix:.+)</SourceValue>
    </ValueMap>
  </resolver:AttributeDefinition>

I do not immediately see how to do that with the PSPNG. I see the
'provisionedAttributeValueFormat' configuration option, but I do not see
how I can configure an arbitrary regex transformation.

I would be happy to learn how the PSPNG can currently provide the same
functionality.

Thanks,

Scott K