Neither Template nor Scripted?

[Martin Haase]

Hi,

my LDAP Dataconnector returns group entries like this:

Group 1: cn=ABC, role=R1;R2

Group 2: cn=DEF, role=R3

>From how I fill the LDAP I can guarantee that cn is always single value,
and the role is multivalue.

I want the IdP to spit out three values for a new attribute like this:

"R1:::ABC"

"R2:::ABC"

"R3:::DEF"

I see I cannot use Template, since the role attributes are multivalue
and the cn is not. And I now realized that Scripted will work neither:
It seems like the script is being invoked only once with the attribute
values of all entries merged, instead of being invoked anew for each
LDAP entry (what I had expected). So the script only sees cn=[ABC,DEF],
and role=[R1,R2,R3], which is not an information that allows to assign
the roles to the correct cns.

Any idea how this could work?

Thanks

Martin

-- 
Dr. Martin Haase, Solutions Engineer

DAASI International GmbH        
Europaplatz 3                   
D-72072 Tübingen                
Germany                    

phone: +49 7071 407109-0
fax:   +49 7071 407109-9  
email: martin.haase at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz