https://github.com/SUNET/SATOSA/pull/89 Sorry about the cryptic name... This is a PR for attribute-based authorization, eg so you can say "must have employee at .+ to access this service" etc. I will push example config to the PR tomorrow... Cheers Leif