<div dir="ltr"><div>Wondering if anyone can give me a prod in the right direction....<br></div><div><br></div>I am writing an LDAP connection (IdP3) -- the unique bit is that a user can have multiple accounts -- all with same uid name--  but in different OUs<br><div><br>idp.attribute.resolver.LDAP.entire.baseDN goes across the whole of the LDAP<br><br></div><div>Can I use mergeResults to get the combined 'memberOf' from same uid name-- but from all the different OUs?<br><br></div><div>The search below only gets it from 1 of the OU (but not the others) -- so I am not sure if my assumption on mergeResults is correct?<br><br></div><div>Thank you.<br></div><div><br><br> <resolver:DataConnector id="LDAPCONN" xsi:type="dc:LDAPDirectory"<br>                ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"<br>                baseDN="%{idp.attribute.resolver.LDAP.entire.baseDN}" <br>                principal="%{idp.attribute.resolver.LDAP.bindDN}"<br>                principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"<br>                useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS}"<br>                connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"<br>                responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"<br>                mergeResults="true"><br>                <resolver:FailoverDataConnector ref="LDAPCONN-staticfailoverconnector" /><br>                <dc:FilterTemplate><br>                    <![CDATA[<br>                        (uid=$requestContext.principalName)<br>                    ]]><br>                </dc:FilterTemplate><br>                <dc:ReturnAttributes>memberOf</dc:ReturnAttributes><br>                <dc:ConnectionPool<br>                    minPoolSize="%{idp.pool.LDAP.minSize}"<br>                    maxPoolSize="%{idp.pool.LDAP.maxSize}"<br>                    blockWaitTime="%{idp.pool.LDAP.blockWaitTime}"<br>                    validatePeriodically="%{idp.pool.LDAP.validatePeriodically}"<br>                    validateTimerPeriod="%{idp.pool.LDAP.validatePeriod}"<br>                    expirationTime="%{idp.pool.LDAP.idleTime}"<br>                    failFastInitialize="%{idp.pool.LDAP.failFastInitialize}" /><br>          </resolver:DataConnector><br>          <br></div></div>