support for AD's range retrieval of attribute values in LDAP data connector?

Robert A Basch rbasch at mit.edu
Fri Dec 11 15:40:27 EST 2015


Our v2 IdP is pulling some attributes from Active Directory, via the LDAP
data connector, and we have encountered an issue where no values are returned
for an attribute when the number of values exceeds the AD limit.  In such a
case, AD requires that values be retrieved using ranges in the search, as
described in:

  https://msdn.microsoft.com/en-us/library/cc223242.aspx

Is there any to configure the v2 resolver to support this?  Is it supported
in v3 (I cannot test that at the moment)?

(We are aware it is possible to bump the limit in AD as a work-around).

Thanks,
Bob



More information about the users mailing list