Re: [Unity-idm-discuss] remove elements from groups attribute

[Krzysztof B. <kb...@un...>]

Hi,

W dniu 03.04.2017 o 10:59, Sander Apweiler pisze:
> Hi Krzysztof,
>
> We have some unity subgroups fro internal usage like enquiry forms.
> Those groups should not provided to SPs. Is is possible to filter
> elements from groups attribute?
>

Easy & typical way would be to use subGroups property of the output 
profile to fill the produced groups attribute. If this is not enough and 
you need to perform more fancy filtering, then you can do basically 
anything with MVEL.

For instance something like this (not much tested) should produce a list 
of groups starting with '/foo/':

($ in groups if $.startsWith('/foo/'))

and use this as your membership attribute value.

See MVEL docs for more examples. There is also MVEL shell available 
(java -jar mvel-....jar) for easy testing.

Best
Krzysztof