Password login flow & Kerberos

[Cantor, Scott]

> I would say stop there, and, instead, separate authentication from
> attributes. Configure an LDAP DataConnector and appropriate
> AttributeDefinitions in attribute-resolver.xml to get the attributes
> you want (and of course filter them appropriately in
> attribute-filter.xml). In other words, I don't think it's a best
> practice to rely on authentication for attributes.

Definitely not, it's very limiting.

-- Scott