Hi Andy, Took a while for me to dive deeper into it. In the end, approach 1 seems to be the way to go for me. I haven't though about using the service access strategy. So, thanks a lot for the pointer. Actually, the default strategy seems to be sufficient already. I am thinking of using the requiredAttributes property, see https://apereo.github.io/cas/5.3.x/installation/Configuring-Service-Access-Strategy.html#default-strategy
I'll let you know, if that finally works out the way I intended. Meanwhile I would also be curious if anybody else had experience this kind of challenge. Cheers, Martin -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/24a2f672-2bb4-4c01-83a1-28771d590fdd%40apereo.org.