Getting error "Invalid Attribute resolver configuration"

[Cantor, Scott]

> OK, I figured out that it was putting some invalid credentials errors in idp-
> warn.log and I was only looking at idp-process.log (I'm running this on
> Windows).

The warn log is more of a thing once you're in production, debugging something involves the process log as a whole.

> Is there any in-depth documentation on how FilterTemplate works here?

Not yet, though all the javadocs are in place if you're getting into really hairy stuff, which you're not.

FWIW, the file you posted had no LDAP connector in it at all, other than the commented out example.

> Like, I've seen in examples that you can use $requestContext.principalName
> in there, but how does $requestContext.principalName get set?

The canonicalized principal name resulting from authentication is what's in it.

> And what else can I use in there?

Lots of other data reachable from the requestContext object, but it virtually never matters.

-- Scott