Default value for idp.attribute.resolver.LDAP.returnAttributes ?

[Tom Zeller]

What should the default be for the property that defines the attributes returned from an LDAP directory ?

Currently, we default to returning cn, homephone, and mail in ldap.properties :

 idp.attribute.resolver.LDAP.returnAttributes = cn,homephone,mail

But, the property is only used in attribute-resolver-ldap.xml which has source attributes of eduPersonPrincipalName, mail, and uid. So, a mismatch. I guess it’s easy enough to change “cn,homephone,mail” to "eduPersonPrincipalName,mail,uid”.

Over in IDP-653, there’s a comment that the property is not used in attribute-resolver-full.xml, which makes sense because every source attribute would need to be enumerated. So … the property is really just for attribute-resolver-ldap.xml, I guess.

Advice welcome,
Thanks,
Tom