Nick Howes wrote:
> Ah, if the values are already chosen then that makes things a little
> difficult. I wonder if the SP would be able to bend slightly by
> prepended all their group names with some string such that they do
> form a valid URN (eg "urn:some-sp-entitlement:"), and you can then
> generate the same in the attribute resolver.
(I realise that the example is not technically a valid URN as it's not
under a registered namespace - you could do a similar thing using any
prefix URL instead.)
|