resolving attributes from a different OU- best approach?

[Flannery, Sean]

Hello,

I'm wondering if someone could guide me on the best way to solve this.

CASE: some of the attributes in our schema refer to objects in different OUs, i.e. your office value is something like ou=a80cb6744,ou=offices, and we want to release them as more readable SAML attributes than just a DN to another  OU, i.e. we want load office a80cb6744 and release it via its description field.

Initially I thought the best way to do this might be to write a custom ShibbolethAttributeResolver that loads the other objects (from the other OUs) and then converts them into a readable description.  That API seems relatively straight forward so I think I'd be fine looking into that, but I'm now wondering if I can just chain together DataConnectors and handle this via the Dependencies support, where one Ldap Data Connector loads the full profile of the person, including the officeID attribute (which is a DN to an office object) and another Ldap Data Connector loads the office from the officeID attribute and gets its description field and releases the value as a generated attribute on the person, i.e. the person has an attribute value for office as "East Cairo" rather than "ou=a80cb6744,ou=offices"

Does this question make sense?  How do most people handle loading data from a different OU?  (I'm guessing the answer is- most people have that data in a readable format on the person object, but unfortunately that's not an option for the schema / data structure we have).

Any guidance would be appreciated.  Thanks for your time.

Sean


This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150209/b818c4c9/attachment-0001.html