 |
 |
Nick Howes wrote: > Ah, if the values are already chosen then that makes things a little > difficult. I wonder if the SP would be able to bend slightly by > prepended all their group names with some string such that they do > form a valid URN (eg "urn:some-sp-entitlement:"), and you can then > generate the same in the attribute resolver. (I realise that the example is not technically a valid URN as it's not under a registered namespace - you could do a similar thing using any prefix URL instead.)