Shibboleth Developers

["Scott Cantor" <>]

> What I really want is "Entitlement-sp-1", which I compute only if the
> SP is SP-1; "Entitlement-sp-2", which I compute if SP-2; and the
> "Entitlement-sp-3", which I compute if the SP is SP-3. Before responding
> with attributes I combine all the "Entitlements*" into one
> "eduPersonEntitlement" and send that.  This way I can avoid the
> time-consuming calculations for entitlements that I know I 
> will not need.

It seems like one simple way of approaching this (in terms of not requiring
a lot of code changes) might be to create a conditional hook in the
Attribute or Connector syntax so that it only ran if the requester matched
some condition (like a matchFunction with ARPs).

Then certain connectors would execute but stub out when the match failed,
supplying no values...

-- Scott