IDP LDAP data connector

[Hong Ye]

Hello,

Some AD attributes can only be returned when doing base level search. How to define search scope in the LDAPConnector? Can the baseDN be defined using user’s distinguishedName?

<DataConnector id="myLDAP" xsi:type="LDAPDirectory"
    ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"
    baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
    principal="%{idp.attribute.resolver.LDAP.bindDN}"
    principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"

Thanks!

Hong

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170725/92a5efd2/attachment-0001.html>