shibboleth.c14n.attribute.PrincipalNameLookupStrategy bean

[Cantor, Scott]

On 2/15/17, 8:52 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> This is no different than before, but the logging is kinda funny:

I guess I'd call it "accurate", what would an alternative do and how would it work? The Duo flow doesn't operate on the value being logged by the LDAP bean. The value's around, but it's buried inside some earlier flow's result, nothing the Duo flow knows about.

I guess one point to make is that you can make the Password flow do simple pre-login transforms like chopping email domains. If that's the only transform needed, you probably don't need all this extra machinery at all. This is for mapping between data you can only crosswalk with directories.

-- Scott