<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Wed, Oct 9, 2013 at 2:48 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im"><span style="color:rgb(34,34,34)">The SP has no LDAP support, the only built-in additional lookup capability</span><br>
</div>
is in a plugin that issues SAML queries. So you have three choices:<br>
<br>
- do it in your application<br>
- stand up a SAML attribute authority such as Shibboleth to access the AD<br>
and issue queries to it<br>
- write a C++ plugin to the SP supporting LDAP<br>
<br>
Or the fourth of course, use a different SAML SP implementation that does<br>
account linking to AD. ADFS for example can do this.<br></blockquote><div><br></div><div>Thanks everybody, I was a bit uncertain about what possibilities actually were available. I think doing it in the app for now or maybe looking into ADFS in the future might be the way forward here.</div>
<div><br></div><div>-- Rikard</div><div><br></div></div></div></div>