> In attribute-resolver -- is it possible to have a data connector query the DB > based on an SP being accessed? Yes, the wiki documents the contextual environment the templates operate in with links to the Javadocs for the relevant classes. https://wiki.shibboleth.net/confluence/display/IDP30/QueryTemplate -- Scott