Attribute resolver vs. script

Dave Bartholomew Dave.Bartholomew at
Thu Dec 3 18:02:43 EST 2015

> And arguably even worse would be defining separate attributes...

OK, thanks, it looks like a script it is.

Or maybe better, putting the logic for the single "correct" e-mail address
in IdM via the data source (or the data feed to IdM itself) before it gets
to AD so Shibboleth has a simple primary e-mail attribute to deal with.

-- Dave

More information about the users mailing list