attribs from db what jaas uses

[Nate Klingenstein]

Also, I think the general approach at large organizations is to consolidate this kind of identity management activity upstream.

Multiple authoritative data sources for the same identifiers and same attributes in the same namespace is a recipe for chaos.

Resolving this in the IdP isn't a general solution for e.g. those apps that only speak LDAP, and it's using a wrench to tighten a screw.  You can do it, but the tool wasn't meant for the job.

On Jun 23, 2014, at 5:04 PM, Nate Klingenstein <ndk at internet2.edu<mailto:ndk at internet2.edu>>
 wrote:

Maybe someone on the list has a better idea,

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140623/b6930e82/attachment.html