AD attributes in assertion to SP

[Peter Schober]

* Kishore Basa <Kishore.Basa at infor.com> [2016-10-27 23:00]:
> Attributes from AD are not passed in the assertion , no errors seen
> in logs.  Could someone point me to what is missing.

Turn up logging to DEBUG for the resolver (and or filter), that will
tell you exactly when and why they're dropped. E.g. for
"net.shibboleth.idp.attribute", which will cover both .resolver and
.filter classes.

> I configured the attribute-resolver-ldap.xml  to fetch few attributes from AD.  Added below lines.

Did you configure the IDP to use that specific resover file
attribute-resolver-ldap.xml, though?

$ fgrep resolver conf/services.xml
        <value>%{idp.home}/conf/attribute-resolver.xml</value>

-peter