<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif"><span style="font-family:Arial,Helvetica,sans-serif">On Tue, Dec 1, 2020 at 10:35 AM Feinstein, Moses <</span><a href="mailto:moses.feinstein@touro.edu" target="_blank" style="font-family:Arial,Helvetica,sans-serif">moses.feinstein@touro.edu</a><span style="font-family:Arial,Helvetica,sans-serif">> wrote:</span><br></div></div><div dir="ltr"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang="EN-US">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-left:1in">               <DataConnector id="myLDAP" xsi:type="LDAPDirectory"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              ldapURL="%{idp.attribute.resolver.LDAP.ldapURL}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              baseDN="%{idp.attribute.resolver.LDAP.baseDN}"
<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              principal="%{idp.attribute.resolver.LDAP.bindDN}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:false}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              exportAttributes="%{idp.attribute.resolver.LDAP.returnAttributes}"><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              <u></u>
<u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              <u></u>
<u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              <FilterTemplate><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             <![CDATA[<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                                            %{idp.attribute.resolver.LDAP.searchFilter}<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             ]]><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              </FilterTemplate><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-left:1in">                              <ConnectionPool<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             minPoolSize="%{idp.pool.LDAP.minSize:3}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             maxPoolSize="%{idp.pool.LDAP.maxSize:10}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             blockWaitTime="%{idp.pool.LDAP.blockWaitTime:PT3S}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             validatePeriodically="%{idp.pool.LDAP.validatePeriodically:true}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             validateTimerPeriod="%{idp.pool.LDAP.validatePeriod:PT5M}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             validateDN="%{idp.pool.LDAP.validateDN:}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             validateFilter="%{idp.pool.LDAP.validateFilter:(objectClass=*)}"<u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">                                             expirationTime="%{idp.pool.LDAP.idleTime:PT10M}"/><u></u><u></u></p>
<p class="MsoNormal" style="margin-left:1in">               </DataConnector></p></div></div></blockquote><div><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">I believe you need to add a <ReturnAttributes /> element to your DataConnector which includes the operational attribute.</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">--Daniel Fisher</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div></div></div>
</div>