how to add a non-single valued attribute, like memberOf

[Clayton]

We've got Shibboleth attached to ActiveDirectory and it's resolving
single-valued attributes, like "sn", just fine.
But now I'm trying to add a list-type attribute, "memberOf", so that it
can be sent to SPs and it isn't being sent.

I expected just adding these to attribute-resolver.conf and then adding it
to the attribute-filter entry for an SP would do the trick, but it doesn't
seem so:

<AttributeDefinition id="memberOf" xsi:type="Simple"
sourceAttributeID="memberOf">
     <Dependency ref="myLDAP" />
     <AttributeEncoder xsi:type="SAML1String"
name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" encodeType="false" />
     <AttributeEncoder xsi:type="SAML2String"
name="urn:oid:1.3.6.1.4.1.1466.115.121.1.12" friendlyName="memberOf"
encodeType="false" />
</AttributeDefinition>

Any tips?
Thanks in advance!
--Clayton

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171108/4d45a785/attachment.html>