Testshib Dummy Users Email Attribute

[Nate Klingenstein]

On Jun 23, 2015, at 8:28 PM, Antelmo Aguilar <Antelmo.Aguilar.17 at nd.edu<mailto:Antelmo.Aguilar.17 at nd.edu>> wrote:

I believe I understand what you mean by this feature.  So what I could do is kind of setup a local Shibboleth Idp and have this Idp connect to my local LDAP service.  Then I could use the aggregate feature to also get more attributes from my LDAP service through my local Shibboleth Idp?

Yes, so long as the user identifiers match and the IdP is known, or you could deploy any other IdP you’d like that can talk to your directory.  It’s just a SAML query, as Scott indicated.  LDAP doesn’t have the trust bits for federated use.

You could also add another protection mechanism that speaks native LDAP in tandem if you preferred, but you’ll lose the basic federation stuff.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150624/8c5e1271/attachment.html>