chaining multiple authentication methods

[Pablo Vidaurri]

We are currently using LDAP but also want to integrate with Azure AD.

I was looking at chaining these so that Azure AD is check first, then falls back to LDAP if user not found in AD. I see these two properties for both methods:

cas.authn.azure-active-directory.order=0

cas.authn.attributeRepository.ldap[0].order=1

I do not have access yet to Azure AD but would this setting work to look in AD first then in LDAP? For some reason this does not look like ordering would be honored unless the same method is in an array like ldap[0].order=1, ldap[1].order=0

-psv