IDP3 Occasionally failing to generate user attributes

[Cantor, Scott]

On 9/1/20, 12:39 PM, "users on behalf of Timothy Enders" <users-bounces at shibboleth.net on behalf of tenders at loyola.edu> wrote:

> These (at least some of the ones I've checked) do appear to be actual users who did have a successful auth through
> Azure. In that case, is this somehow still Azure returning a "null" value (that's actually that string) every so often when
> someone logs in?

I can't see any other explanation when the log line immediately follows an explicit null check for the field being logged.

>    I assume that the further error about the Attribute Definition script not running correctly is maybe caused by the fact
> that the IDP can't look up the user in LDAP at all, instead of a communication issue with LDAP. Does that make any
> sense?

And the fact your LDAP lookup is programmed to treat no results as success, causing another script to run that's probably sourcing data from a resolved attribute with no values.

The whole resolver stack is implicated.

-- Scott