IDP -- need to query attribute store with two different search filters

[Steven Carmody]

On 3/17/14 2:02 PM, Scott Koranda wrote:
>> I'm stumped, however, as to how to configure the IDP's
>> attribute-resolver file, and in particular the ldap DataConnector
>> element, so that a single IDP could handle both of these situations.
>>
>
> You wrote "the" LDAP DataConnector element.
>
> Have you considered using more than one LDAP DataConnector element?
>

I currently have lots of these attribute definitions:

   <resolver:AttributeDefinition id="isMemberOf" xsi:type="Simple"
   xmlns="urn:mace:shibboleth:2.0:resolver:ad"
   sourceAttributeID="isMemberOf">
     <resolver:Dependency ref="brownLDAP" />

that are dependent on the ldap DataConnector.

I could create a parallel set of AttributeDefinitions, dependent on a 
new  ldap DataConnector.

Or could I the existing definitions dependent on two ldap 
DataConnector's (only one of which would return values in a given 
situation).

The other thought I just had was to modify my ldap search filter to 
something like this:

	( ((uid=[entered value]) OR (eduPersonPrincipalName=[EPPN value]) )

where only one those would match a user object .