IdP 4.0.1 and ldap/UnboundID connectionStrategy

[Cantor, Scott]

On 2/2/21, 9:41 AM, "users on behalf of Jarno Huuskonen" <users-bounces at shibboleth.net on behalf of jarno.huuskonen at uef.fi> wrote:

>    (Does this change the connectionstrategy or creates multiple authn pools
>    that are tried in sequence ?)

Yes.

>    Does anybody have an example for creating multiple LDAPValidator beans ?

The documentation describes and provides an example of how to override the ldaptive Authenticator for a particular validator.

That in turn is configurable in just about every way by creating beans inheriting from shibboleth.LDAPAuthenticationFactory of type LDAPAuthenticationFactoryBean, the javadoc for which is linked from the Beans reference on the LDAPAuthnConfiguration page.

Among the properties is the LDAP server URL. i.e. define a bunch of separate beans with their own URLs and plug each one into a different LDAPValidator.

-- Scott