IDP : Dynamically choose ldap instance from principal

[Cédric Couralet]

2013/11/5 Peter Schober <peter.schober at univie.ac.at>:
> * Cédric Couralet <cedric.couralet at gmail.com> [2013-11-05 08:09]:
>> Is there a way to change ldapURL to a dynamic value (taken from
>> principal for exemple)?
>
> You could pull data from the principal using a Script type attribute
> definition. Not sure how you'd dynamically configure an LDAP
> DataConnector with that, though.
>
> That all sounds like you could use a meta directory of some kind (to
> present a unified view to applications and services), as you'll have
> the same problems with each and every software looking up attributes
> from LDAP.

We are going there, but it takes time. Basically, We already have a
service which pull information from all ldap servers. We only need a
way to authenticate against those different ldap servers. I think
Shibboleth could be a good solution.
The aim is to hide the ldap completely from applications to be able to
change it any way we see fit.

Thank you for the answers.