core:GenerateGroups

This filter creates a group attribute based on the contents of the other attributes of the user.

By default this filter will generate groups from the following set of attributes:

This can be overridden by specifying the names of the attributes in the configuration.

It will attempt to determine a realm the user belongs to based on the eduPersonPrincipalName attribute, if it is present.

The groups this filter generates are on the form <attribute name>-<attributevalue> and <attributename>-<realm>-<attributevalue> . For example, if the user has the following attributes:

The following groups will be created:

Examples

Default attributes:

  'authproc' => [
      50 => [
          'class' => 'core:GenerateGroups',
      ],
  ],

Custom attributes:

  'authproc' => [
      50 => [
          'class' => 'core:GenerateGroups',
          'someAttribute',
          'someOtherAttribute',
      ],
  ],