shibboleth IdP configuration with active directory

[Peter Schober]

* vaishali prajapati <vbprajapati39 at gmail.com> [2017-09-11 13:50]:
> #idp.authn.LDAP.authenticator                   =bindSearchAuthenticator

Why not set
  idp.authn.LDAP.authenticator= adAuthenticator
when you're using MD-AD?

Then all you'd commonly need is this:

idp.authn.LDAP.ldapURL= your-LDAP-URL
idp.authn.LDAP.baseDN= whatever # only needed here because the same settings are used for the resolver
idp.authn.LDAP.userFilter= (sAMAccountName={user}) # ditto
idp.authn.LDAP.bindDN= idp-bind at example.org
idp.authn.LDAP.bindDNCredential= somepassword
idp.authn.LDAP.dnFormat= %s at example.org # or %s if you want users to enter foo at example.org as userid

plus maybe TLS/SSL and appropriate trust anchor configuration.
-peter