Fetch Attributes From SAML IdP

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2013-06-27 16:46]:
> I cannot know what is right in your case but I would assume that using
> the exact same values which work for authentication via JAAS will work
> for attribute resolving (i.e.,
> userPrincipalName=${requestContext.principalName} instead of cn=...).

One other difference between your working config (JAAS) and your
attribute resolver is the bindDn: JAAS has bindDn="CryoserverJournal"
(which is not a real DN, of course, but seems to work for your LDAP
DSA implementation) and the resolver has
principal="cn=CryoserverJournal,cn=Users,dc=fcsjpr,dc=com".
No idea whether that would make a difference in your environment.

More importantly, you shouldn't need anyone's help to find the
difference between two of your own config files containing LDAP
connection parameters, one working, the other non-working.
-peter