accessing user principal in scripted attributes

[Rod Widdowson]

> That seems like something more serious is wrong, that should be populated,
as
> should resolutionContext.

That’s what I'd say as well.
 
> Unless there's something in the log, I'd have to defer to Rod. I don't see
what
> could possibly cause that.

I'm equally stumped.  Is there anything else 'special' about this script?  

Is this the Nashorn interpreter we distributed for Java8? I'm betting that
that isn't the problem, but it isn't something  I have explicitly tested
recently (but I'll bet that Scott has).

You might like to turn up the logging to TRACE for

edu.internet2.middleware.shibboleth.common.attribute.provider
and
net.shibboleth.idp.attribute.resolver.ad

and see if anything pops.

/Rod