Can an option be added to net.shibboleth.idp.profile.logic.SimpleAttributePredicate to ignore case when performing matches? Or should I use the RegexAttributePredicate instead? I'm doing a comparison against values of ismemberof. It would be easier to ignore case rather than try to figure out which exact string LDAP is returning. Thanks, Andy