Get variable from Azure

[Dave Perry]

I am at a similar point, but getting c14n/attribute population errors - so LDAP lookups don't work.

Currently working on it with the UK Federation.

Sent from Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Ивайло Игнатов via users <users at shibboleth.net>
Sent: Sunday, April 30, 2023 7:58:24 AM
To: users at shibboleth.net <users at shibboleth.net>
Cc: Ивайло Игнатов <mm3 at abv.bg>
Subject: Get variable from Azure

Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.


Hello,
I setup Shibboleth IdP 4.3.1 as Azure proxy and it work fine.I want, after user login with his/her Azure credentials, to search in local LDAP for this user, but using Azure UUID.
In attribute-resolver.xml I try this:

<DataConnector id="myLDAP" xsi:type="LDAPDirectory" ...
    <ReturnAttributes>* +</ReturnAttributes>
    <InputAttributeDefinition ref="schacSn2" />

    <FilterTemplate>
        <![CDATA[
                uid=$resolutionContext.principal
        ]]>
    </FilterTemplate>
...
</DataConnector>

(Works, but search for user principal name)
Just for sample, this works too:

<![CDATA[       entryUUID=3d746326-7256-103d-9366-6beb72b64c1c]]>

I can see corect Azure UUID (with schacSn2, 1.3.6.1.4.1.25178.1.2.7) and entryUUID values in SP after login. The additional information I get from LDAP is also visible in the above examples.

In FilterTemplate, this gives an error or returns an empty value:

entryUUID=$schacSn2entryUUID=$schacSn2.get(0)entryUUID=$schacSn2.getValues().get(0)
How to set up FilterTemplate to get Azure UUID and search in LDAP ?
Thank you!
--
For Consortium Member technical support, see https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C01%7Cd.perry1%40yorksj.ac.uk%7C534a41c727d84a59031308db4948597e%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C638184347304631175%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=T22KjwIjP8mB6On0LW4%2BRXgzEmtzp6DEpfTuFhHe3Mw%3D&reserved=0<https://shibboleth.atlassian.net/wiki/x/ZYEpPw>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230501/e53bef47/attachment.htm>