Conditioned attribute

[Peter Schober]

Jan Marek via users <users at shibboleth.net> [2024-07-08 11:27 CEST]:
> and in the file conf/ldap.properties I have this definition:
> 
> idp.authn.LDAP.returnAttributes = "uid cn eduPersonAffiliation eduPersonEntitlement eduPersonPrimaryOrgUnitDN eduPersonPrimaryAffiliation eduPersonOrgUnitDN sn ou givenName uidNumber businessCategory pager mail displayName"

If that's literally what you have in that file then I'd assume it's
simply failing to find two attributes called
  "uid
and
  diplayName"
respectively.

I.e., remove the quotes around the space-separated list of attribute
names and it should work.

I'd still remove all those attributes from
idp.authn.LDAP.returnAttributes and only list them either directly in
the resolver or put them into a custom property of your own and not
within idp.authn.LDAP.returnAttributes

HTH,
-peter