<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr" data-setdir="false"><div><p style="background:white" dir="ltr" data-setdir="false"></p><div><div style="background:white" dir="ltr" data-setdir="false"><span style="font-size: 10pt;">We tried to config LDAP authentication and try to release
attribute mail to sp, but don't see mail attribute from sp side. Did we miss
some config? </span></div>

<div style="background:white"><span style="font-size:10.0pt;color:black;background:white"><br></span></div><div style="background:white"><span style="font-size:10.0pt;color:black;background:white">Below are the current ldap settings in 3 files. </span><span style="font-size: 10pt;"> </span></div><p style="background:white"><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><b><span style="font-size:10.0pt;color:black;background:#FFFF80">ldap.properties</span></b><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black;background:white">idp.authn.LDAP.authenticator        
          = adAuthenticator</span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black;background:white">idp.attribute.resolver.LDAP.searchFilter      
 = (mail=$resolutionContext.principal)</span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><b><span style="font-size:10.0pt;color:black;background:white">idp.attribute.resolver.LDAP.returnAttributes = mail</span></b></p>

<p style="background:white"><b><span style="font-size:10.0pt;color:black;background:#FFFF80">Attribute-Resolver.xml</span></b><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><AttributeDefinition
xsi:type="Simple" id="mail" sourceAttributeID="<b>mail</b>"></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><InputDataConnector
ref="myLDAP" attributeNames="mail"/></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><AttributeEncoder
xsi:type="SAML1String" encodeType="false"
name="urn:mace:dir:attribute-def:mail"/></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><AttributeEncoder
xsi:type="SAML2String" encodeType="false"
name="urn:oid:0.9.2342.19200300.100.1.3"
friendlyName="mail"/></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"></AttributeDefinition></span></p>

<p style="background:white"><b><span style="font-size:10.0pt;color:black;background:#FFFF80">Attribute-filter.xml</span></b><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><AttributeFilterPolicy
id="anyone"></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><PolicyRequirementRule
xsi:type="ANY"/></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><AttributeRule
attributeID="<b>mail</b>"></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"><PermitValueRule
xsi:type="ANY"/></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"></AttributeRule></span><span style="font-size:10.0pt;color:#201F1E"></span></p>

<p style="background:white"><span style="font-size:10.0pt;color:black"></AttributeFilterPolicy></span><span style="font-size:10.0pt;color:#201F1E"></span></p></div><div><br></div><div dir="ltr" data-setdir="false">thanks, </div><div dir="ltr" data-setdir="false">SC</div><p></p></div></div></div></body></html>