On Tue, Nov 4, 2014 at 10:30 AM, John Dennis <jdennis at redhat.com> wrote: > O.K. group assignment is the final goal in Keystone. I suppose the > relevant question then is the functionality in the current Keystone > mapper sufficiently rich such that you can present to it an arbitrary > set of values and yield a group assessment? It's been a while since I > looked at the mapper, things might have changed, but it seemed to me it > had a lot of baked in assumptions about the data (assertion) it would > receive. As long as those assumptions held true all is good. > There are probably a few other assumptions, but the main one is that the mapper expects the incoming data to be a dictionary where the value is a string. If there are multiple values we expect them to be delimited with a semicolon in the string. -- David blog: http://www.traceback.org twitter: http://twitter.com/dstanek www: http://dstanek.com -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20141104/13cfa0ed/attachment.html>