Box.com and Shibboleth

[Cantor, Scott]

> So it turns out, that this little bugger from ldap.properties was the
> main problem the whole time.

Mmm, hmm.

> idp.attribute.resolver.LDAP.returnAttributes    =
> cn,homephone,mail,uid,sn,givenName
> 
> By default it only had cn,homephone,mail. Once I added uid,sn,givenName,
> those properties were no longer null and they started passing. I feel
> like banging my head against my desk over and over. :)

Any feedback to my proposal we dump the default properties for LDAP? If not the connection details at least the semantic data...?

-- Scott