<div dir="ltr">Hi,<br><br>In Shibboleth IdP we are currently using SamAccountName for authentication.<br><br>Below is the configuration in ldap.properties: <br><br>idp.authn.LDAP.authenticator= bindSearchAuthenticator <br>idp.authn.LDAP.userFilter= (sAMAccountName={user})<br>idp.attribute.resolver.LDAP.searchFilter= (sAMAccountName=$resolutionContext.principal)<br><br>And attribute-filter.xml<br><br><br>        <AttributeRule attributeID="eduPersonPrincipalName"><br>            <PermitValueRule xsi:type="ANY" /><br>        </AttributeRule><br> <br>        <AttributeRule attributeID="eduPersonTargetedId"><br>            <PermitValueRule xsi:type="ANY" /><br>        </AttributeRule><br><br>        <AttributeRule attributeID="uid"><br>            <PermitValueRule xsi:type="ANY" /><br>        </AttributeRule><br><br>        <AttributeRule attributeID="mail"><br>            <PermitValueRule xsi:type="ANY" /><br>        </AttributeRule><br>    </AttributeFilterPolicy><br><br>Now we want to change it to an email address.  So as per some google searches, I changed the ldap.properties to :<br><br>idp.authn.LDAP.userFilter= (mail ={user})<br>idp.attribute.resolver.LDAP.searchFilter=(mail=$requestContext.principalName)<br><br>But still, users are not authenticating with the email address with the wrong password. Whereas the same password is working with samAccountName. <br><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)">Regards,</span><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><br><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><div><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"><font size="4">Waqas Ahmed Khan</font></span></b><span style="color:rgb(32,18,77)"><br>p: +923212608044</span><span style="font-size:12pt;font-family:"Times New Roman","serif""></span><b><span style="font-family:"Calibri","sans-serif";color:rgb(0,176,80)"></span></b><div style="padding:0px;overflow:hidden;margin-left:0px;margin-top:0px;color:black;text-align:left;line-height:130%"><span style="color:rgb(31,73,125)"><span style="color:rgb(32,18,77)">Skype:</span> </span><span style="font-size:11pt;font-family:"Calibri","sans-serif";color:rgb(31,73,125)"><a href="mailto:waqas.ahmed0@gmail.com" target="_blank">waqas-ahmed00</a></span><span style="font-size:12pt;font-family:"Times New Roman","serif""></span><span style="color:rgb(31,73,125)"><br><a href="mailto:waqas.ahmed0@gmail.com" target="_blank"><span style="color:blue">waqas.ahmed0@gmail.com</span></a></span><span style="font-size:12pt;font-family:"Times New Roman","serif""></span> <br><br><a href="http://pk.linkedin.com/pub/waqas-ahmed-khan/15/96a/39a/" target="_blank"><span style="font-size:11pt;font-family:"Calibri","sans-serif";text-decoration:none"><img src="cid:image001.gif@01CEF02C.46B4BBC0" alt="LinkedIn" width="160" height="33" border="0"></span></a><br></div></div></div></div></div>
</div>