LDAP Authentication and LDAP Attributes

[Rod Widdowson]

> To be clear, I'm also against the attribute resolver properties being in
> there.

Absolutely.
 
> The difference to me is between configuring the IdP itself, and the
> settings involved with site-specific integration choices.

I hear you.  So pulling this in another direction, is there mileage in
adding other integration specific properties files?  My instinct is 'no',
LDAP is really only of interest (to me) because the same connection is
(potentially) used at two integration points AuthN and Attributes.

> I forgot that we internalized all that, but I can think of one obvious way
> that actually we should do anyway, add a property to idp.properties to
> point to additional property files.

Some sort of

Idp.ldap.properties="whatever"

Or better 

Idp.inetgration.properties="whatever"

?

But in fact my concern is more fundamental, whether spring easily allows for
the configuration of two properties files for property replacement (we will
need both)?

/Rod