...
Can we do shared secret instead of JOSE certificates? Yes, and we need to decide what the default will be
Comments from DaveL
| Code Block |
|---|
I'm not sure I like the transformation part. Secondly, I think I'd rather have individual provisioning from specific groups/folders configured directly on that group via ldap a-la-grouper-loader-ldap. That way when a person is looking at the group in the UI they can see where it's going and what it's going out as.
Forgot to add that config via attribute allows the grouper admins to delegate the management of provisioning to those who would ultimately manage the provisioned system. |
...