Distinction between Auth LDAP and Identification LDAP

[Rod Widdowson]

> My question :
> 
> Is it possible to shibboleth to authenticate a given user against ldap 1
> and get its attributes on ldap 2?
> 

Absolutely - the ldap1  is (usually) set up in the login.config  file and
the ldap2 is set up in attribute-resolver.xml

You 'just' need to make sure that the principals are the same (or that you
do the required mapping).

/Rod