Nested LDAP queries: query 2 using results from query 1 in IdPv3
Markus Frei
markus.frei at h-net.ch
Mon Aug 31 03:16:33 EDT 2015
Hi all,
Our users are authenticated against our LDAP, the web applications are
getting user information from the SP and everything is working as
expected.
Now I need to enrich the user information, but for this I have to fetch
our LDAP multiple times:
1. Using the $requestContext.principalName I have to query a
"Relationship" tree, asking to which organizations the user belongs to.
2. Using these results I have to query a "Organization" tree, fetch
organizational attributes and pass them to the SP.
I am able to configure the IdPv3 (ldap.properties,
attribute-resolver.xml) to do two or more independent queries, but I do
not know how to configure a LDAP query using a result list of a
previous query. Can someone give me a hint?
Best Regards
Markus
More information about the users
mailing list