<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">This works perfectly just as Scott says; heres the snippet from description of LDAP:<div><br></div><div><span style="background-color: rgb(255, 255, 255);"><font face="monospace" size="1"> userField="uid,uasystemid,bannerid</font><font face="monospace"><span style="font-size: 11px;"></span></font><font face="monospace" size="1">;</font></span></div><div><span style="font-family: monospace; font-size: 10.909090995788574px; background-color: rgb(255, 255, 255);"><br></span></div><div><span style="font-family: monospace; font-size: 10.909090995788574px; background-color: rgb(255, 255, 255);">and for AD:</span></div><div><span style="font-family: monospace; font-size: 10.909090995788574px; background-color: rgb(255, 255, 255);"><br></span></div><div><span style="font-family: monospace; font-size: 10.909090995788574px; background-color: rgb(255, 255, 255);">userField="sAMAccountName,uaIdentifier";</span></div><div><br><div><div>On Fri, 9 May 2014, at 09:55 , Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On 5/9/14, 1:39 PM, "Carsey, Robert" <<a href="mailto:rcarsey@monmouth.edu">rcarsey@monmouth.edu</a>> wrote:<br><br><blockquote type="cite">So my users insist on being able to logon using their username OR their<br>e-mail address. I know I can stack login handlers, so I have two entries<br>in login.config one for sAMAccountName; one for UserPrincipalName (i.e.<br>their email address).<br></blockquote><br>You don't really have to do that with LDAP, that's the only thing it has<br>going for it, you just specify a search filter that handles either choice,<br>one JAAS module only.<br><br><blockquote type="cite"><br>However, while Iım certain this will allow login using email address as<br>username; I donıt believe it will work OK when it comes time to resolve<br>some attributes; as my LDAP resolver in attribute-resolver.xml have a<br>filter template of:<br></blockquote><br>So you also have to change the filter there to add an "or" pipe.<br><br><blockquote type="cite">So is it a matter of me rewriting the filtertemplate somehow to handle<br>both cases where the user typed in his username (samaccountname) OR his<br>email address (userprincipalname) ?<br></blockquote><br>Yes.<br><br>-- Scott<br><br><br><br><br>--<br>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div><br></div></body></html>