LDAP authentication and attribute release to sp failed

[Nate Klingenstein]

SC,

> ldap.properties
> 
> idp.authn.LDAP.authenticator        
>           = adAuthenticator
> 
> idp.attribute.resolver.LDAP.searchFilter      
>  = (mail=$resolutionContext.principal)

It's just a guess, but your most likely problem is that your searchFilter is looking for LDAP entries that have a "mail" attribute that matches whatever the principal name was that was typed in.  Unless your users are authenticating with their email address as their username, there will be no matches, and you won't have any entry to pull mail from.  You may want to change that to uid= or something similar.

Beyond that, you would have to look at your IdP logs for more information.

Take care,
Nate.

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id