Nested LDAP queries: query 2 using results from query 1 in IdPv3

Markus Frei markus.frei at h-net.ch
Mon Aug 31 03:16:33 EDT 2015


Hi all,

Our users are authenticated against our LDAP, the web applications are 
getting user information from the SP and everything is working as 
expected.

Now I need to enrich the user information, but for this I have to fetch 
our LDAP multiple times:

1. Using the $requestContext.principalName I have to query a 
"Relationship" tree, asking to which organizations the user belongs to.

2. Using these results I have to query a "Organization" tree, fetch 
organizational attributes and pass them to the SP.

I am able to configure the IdPv3 (ldap.properties, 
attribute-resolver.xml) to do two or more independent queries, but I do 
not know how to configure a LDAP query using a result list of a 
previous query. Can someone give me a hint?


Best Regards
Markus






More information about the users mailing list