Template Context in LDAPConnector

[Janusz Ulanowski]

Thanks very much Peter
Indeed I missed InputAttributeDefinition

Janusz

--




________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Peter Schober via users <users at shibboleth.net>
Sent: Monday 18 August 2025 10:15
To: users at shibboleth.net
Cc: Peter Schober
Subject: Re: Template Context in LDAPConnector

CAUTION[External]: This email originated from outside of the organisation. Do not click on links or open the attachments unless you recognise the sender and know the content is safe.


Janusz,

Janusz Ulanowski via users <users at shibboleth.net> [2025-08-18 10:58 CEST]:
> And I'm trying to retrieve additional data about user from LDAP
> using Dependent Attribute instead of Principal in FilterTemplate.
> When I follow example provided in documentation:
> <FilterTemplate>
>   <![CDATA[
>       (uid=$employeeNumber.get(0))
>   ]]>
> </FilterTemplate>
>
> Getting:
>
> DEBUG [net.shibboleth.idp.attribute.resolver.dc.ldap.TemplatedExecutableSearchFilterBuilder:227] - Template text (uid=$uid.get(0)) yields (uid=$uid.get(0))

>From the documentation at
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199503969/FilterTemplate#Template-Context
I'd assume that you'd need an InputAttributeDefinition for "uid" on
the DataConnector with the above FilterTemplate in order to make that
attribute and its values available to that DataConnector:

> For each IdPAttribute available from all the input dependencies, the
> attributes' values are available as a collection under the
> attribute's name.

Do you have declared these "input dependencies"?

HTH,
-peter
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net