shibboleth authentication with Active Directory UPN

[Cantor, Scott]

On 9/14/12 5:47 PM, "Mauro Minella" <Mauro.Minella at microsoft.com> wrote:
>QUESTION: how can the users be authenticated with the upn
>(john.smith at shibdomain.eduteamit.com, abc123ABC), or even with the domain
>account (shibdomain\johns, abc123ABC)?

LDAP authentication (this isn't about Shibboleth or AD) is based on
"search then bind". You control the search filter used in the JAAS module.
After that, it binds by DN based on the search result. SO if you want a
different input to work, you have to change the search filter.

-- Scott