LDAP DN parameter in attribute-resolver.xml IDPv4 file

Fri Nov 12 01:39:10 UTC 2021

On 11/11/21, 12:44 PM, "users on behalf of Tommaso Gallo" <users-bounces at shibboleth.net on behalf of gallo.tommaso at gmail.com> wrote:

>    having an LDAP server where all my users are registered, which works as an authentication system for my
> IDPv4, I would like to know how I can import the DN parameter in the "attribute-resolver.xml" file: ou = xxx, dc
> = aaa, dc = bbb associated with the authenticated user.

When LDAP is used for authentication the Java Subject that results contains an org.ldaptive.jaas.LdapPrincipal.LdapPrincipal that I believe contains a reference to the org.ldaptive.LdapEntry object returned, which has the DN in it among other things.

It's not normally used, but it's there.

-- Scott