A scenario to lookup Active Directory attributes

[Rikard Braathen]

On Wed, Oct 9, 2013 at 2:48 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> The SP has no LDAP support, the only built-in additional lookup capability
> is in a plugin that issues SAML queries. So you have three choices:
>
> - do it in your application
> - stand up a SAML attribute authority such as Shibboleth to access the AD
> and issue queries to it
> - write a C++ plugin to the SP supporting LDAP
>
> Or the fourth of course, use a different SAML SP implementation that does
> account linking to AD. ADFS for example can do this.
>

Thanks everybody, I was a bit uncertain about what possibilities actually
were available. I think doing it in the app for now or maybe looking into
ADFS in the future might be the way forward here.

-- Rikard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131009/33b8f0ae/attachment.html