Template Context in LDAPConnector

Peter Schober peter.schober at univie.ac.at
Mon Aug 18 09:15:29 UTC 2025


Janusz,

Janusz Ulanowski via users <users at shibboleth.net> [2025-08-18 10:58 CEST]:
> And I'm trying to retrieve additional data about user from LDAP
> using Dependent Attribute instead of Principal in FilterTemplate.
> When I follow example provided in documentation:
> <FilterTemplate>
>   <![CDATA[
>       (uid=$employeeNumber.get(0))
>   ]]>
> </FilterTemplate>
> 
> Getting:
>  
> DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.TemplatedExecutableSearchFilterBuilder:227] - Template text (uid=$uid.get(0)) yields (uid=$uid.get(0))

>From the documentation at
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199503969/FilterTemplate#Template-Context
I'd assume that you'd need an InputAttributeDefinition for "uid" on
the DataConnector with the above FilterTemplate in order to make that
attribute and its values available to that DataConnector:

> For each IdPAttribute available from all the input dependencies, the
> attributes' values are available as a collection under the
> attribute's name.

Do you have declared these "input dependencies"?

HTH,
-peter


More information about the users mailing list