> We do this all the time. > We have a REST API in front of an LDAP that is not flattened. > The API takes care of recursion. > We also have an attribute plugin that handles the API. That sounds perfect - is the attribute plugin (a plugin for the IdP, right?) generally available? Steve.