Multiple group memberships

[Cantor, Scott]

On 2/14/17, 4:55 PM, "users on behalf of Ian Bobbitt" <users-bounces at shibboleth.net on behalf of ibobbitt at globalnoc.iu.edu> wrote:

> This is what I have in my attribute-resolver.xml:

That seems fine to me, modulo that I have no idea what LDAP search you really have to perform, and that I would never expose a DN in a SAML assertion.

If that search returns one value back, that's pretty much going to get you one value out, so I'm sure that's the issue. Whether via Simple, Script, anything else, one value in, one out.

-- Scott