<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>On 04/11/2015, 11:54, "users on behalf of lalith jayaweera" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of
<a href="mailto:j_lalith@hotmail.com">j_lalith@hotmail.com</a>> wrote:</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div class="hmmessage">
<div dir="ltr">Unfortunately we don't have any LDAP attribute to authenticate against firstname.lastname but only for email which is the full UPN.<br>
<br>
So my question is how to overcome this practical issue of Apache authentication for ECP,<br>
<br>
As I said it may not be direct shib question, but am curious how others achieved this where local part of UPN is not a direct LDAP attribute value.</div>
</div>
</blockquote>
</span>
<div><br>
</div>
<div>Oh, I see — my apologies. </div>
<div><br>
</div>
<div>We do get around this by having a UPN in Office365 with a local part which matches an attribute in our local LDAP infrastructure.</div>
<div><br>
</div>
<div>Matthew</div>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
</body>
</html>