IDP Attribute Query

[Cantor, Scott]

> I'll note though that there is nothing special about the principal name
> with in the resolver.  It happens to show up in logs but nothing within
> the resolver really cares about it.  So there is no reason to prefer it
> over something the resolver looks up based on it.  In fact, in IdPv3
> there isn't even a special means of accessing it.  It's just an
> attribute like any other.

True, but in the context of attribute queries, all you really have is the NameID in the query, so that has to be used as the starting point.

Using the plugin that identity-maps that into the principalName in V2 is a cleaner way to do it then writing a JDBC or LDAP plugin from scratch.

-- Scott