IDP : Dynamically choose ldap instance from principal

[Cédric Couralet]

2013/11/5 Tom Zeller <tzeller at dragonacea.biz>:
>> I have got several ldap instance, which contains each a subset of
>> users. I would like to configure an IDP to get all attributes from an
>> user.
>> Is it possible to change DataConnector to do something like this?
>
> To get attributes for *every* user from multiple ldap instances, you
> could add one data connector per ldap instance to
> attribute-resolver.xml :
>
>  <resolver:DataConnector id="LDAP1" ldapURL="ldap://ldap1.example.org" ...
>  <resolver:DataConnector id="LDAP2" ldapURL="ldap://ldap2.example.org" ...
>
> for attributes which exist on more than one ldap instance :
>
> <resolver:AttributeDefinition id="affiliation" ...
>  <resolver:Dependency ref="LDAP1" />
>  <resolver:Dependency ref="LDAP2" />
>
> If I understand correctly.
>
> Obviously, this would result in more ldap searches, unnecessarily, but
> I would think that would be okay.

I just tested with that and it works. Here's what I did :
 - add 2 different user to  2 Ldap instances (LdapA and LDAPB)
 - add a resolver for uid which depends on the two DataConnector.

And it works as I want, except it do a search in the two Ldap instances.

The solution with noResultIsError="true" seems a good approach but i
can't make it work, I always receive an ErrorStatus saying "Required
NameID format not supported". It must be an error on my part, I'll dig
into it.

Thank you all for the help.