Box.com and Shibboleth

[Tom Zeller]

>> So it turns out, that this little bugger from ldap.properties was the
>> main problem the whole time.
> 
> Mmm, hmm.
> 
>> idp.attribute.resolver.LDAP.returnAttributes    =
>> cn,homephone,mail,uid,sn,givenName
>> 
>> By default it only had cn,homephone,mail. Once I added uid,sn,givenName,
>> those properties were no longer null and they started passing. I feel
>> like banging my head against my desk over and over. :)
> 
> Any feedback to my proposal we dump the default properties for LDAP? If not the connection details at least the semantic data…?

+1

Plus, it seems too strong to require a restart of the IdP to change the attributes returned from an LDAP query.