> Yes, have made changes to the filter before and is relatively simple. > So if the entitlements are stored as a multi-valued attribute in LDAP it will > create an eduPersonEntitlement attribute for each? Or give one > eduPersonEntitlement attribute multiple values? The latter. -- Scott