Unable to get attribute value.

[Nate Klingenstein]

> Try setting the userFilter to (samAccountName={user}).

> > idp.attribute.resolver.LDAP.searchFilter        =
> > (uid=$resolutionContext.principal)

Sorry, you'll also want to change the searchFilter, as this is the one that's actually giving you problems.  One defines the LDAP search for login, and the other defines the LDAP search for attributes.  My memory that one relied on the other was wrong.

idp.attribute.resolver.LDAP.searchFilter = (sAMAccountName=$resolutionContext.principal)

It's a little surprising to me that authentication would work but attribute resolution wouldn't when you apparently have the same search string, so I wouldn't be surprised if this doesn't fix things either.  You might have the wrong baseDN instead.  I don't know if you configured that.

> idp.authn.LDAP.baseDN                           = cn=Users,dc=domain,dc=com