`core:GenerateGroups`
=====================

This filter creates a `group` attribute based on the contents of the other attributes of the user.

By default this filter will generate groups from the following set of attributes:

* `eduPersonAffiliation`
* `eduPersonOrgUnitDN`
* `eduPersonEntitlement`

This can be overridden by specifying the names of the attributes in the configuration.

It will attempt to determine a realm the user belongs to based on the `eduPersonPrincipalName`
attribute, if it is present.

The groups this filter generates are on the form `<attribute name>-<attributevalue>` and `<attributename>-<realm>-<attributevalue>`.
For example, if the user has the following attributes:

* `eduPersonPrincipalName`: `user@example.org`
* `eduPersonAffiliation`: `student`, `member`

The following groups will be created:

* `eduPersonAffiliation-student`
* `eduPersonAffiliation-member`
* `eduPersonAffiliation-example.org-student`
* `eduPersonAffiliation-example.org-member`


Examples
--------

Default attributes:

    'authproc' => array(
        50 => array(
            'class' => 'core:GenerateGroups',
        ),
    ),

Custom attributes:

    'authproc' => array(
        50 => array(
            'class' => 'core:GenerateGroups',
            'someAttribute',
            'someOtherAttribute',
        ),
    ),