Problem with diffrent ActiveDirectory versus OpenLDAP

Rod Widdowson rdw at
Sat Mar 21 12:51:07 EDT 2020

> I only found to check my attribute-map.xml, but I think it’s OK. Any tipps?

I don't think this is an SP issue.  You need to look at your IdP.  I'd probably start by turning net.shibboleth.idp.attribute.resolver up to DEBUG and studying the logs, this will show you the life of the attribute and its values from exiting the LDAP until they are ready for filtering.

I'd guess its your data connector setup, but who knows.


More information about the users mailing list