Can We do LDAP searching or editing?

[Saurabh Tyagi]

Thanks Nate,

I guess I am unable to express my question.
I reform my question.

Can i serach LDAP for other users(If am admin) using IDP?



Thanks and Regards
Saurabh Tyagi


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of Nate Klingenstein
Sent: Saturday, July 06, 2013 5:35 PM
To: Shib Users
Subject: Re: Can We do LDAP searching or editing?

Saurabh,

> I wanna ask , can I serach remote LDAP which is not accessible directly. 
> Remote LDAP is accessible to IDP only  and not to application.

Yes, of course, and this is the normal deployment pattern: an LDAP directory
communicates directly only with the IdP.  The IdP then relays any attributes
necessary and permitted to the SP.

> Can I serach the LDAP through SP/IDP and not accessing it directly using
any
> API or any thing else.

The LDAP protocol kind-of is the "API".  That's the only interface the LDAP
directory has with the IdP.

Thanks,
Nate.
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net