LDAP groups via memberOf

[Rick Warren]

I am trying to pass LDAP group information through as SAML attributes.

# base <dc=example,dc=org> with scope subtree

# filter: (uid=someuser)

# requesting: memberof 

#

# someuser, people, 15-IT, ABC, example.org

dn: uid=someuser,ou=people,ou=15-IT,ou=ABC,dc=example,dc=org

memberOf: cn=app-vault,ou=groups,ou=Access,dc=example,dc=org

memberOf: cn=15-it,ou=groups,ou=ABC,dc=example,dc=org

memberOf: cn=it-all,ou=groups,ou=ABC,dc=example,dc=org

memberOf: cn=sd_contractor,ou=groups,ou=ABC,dc=example,dc=org

memberOf: cn=app-git,ou=groups,ou=Access,dc=example,dc=org

But I cannot seem to get the memberOf attribute to pass through as a SAML attribute. Can someone please assist me with the correct proc filter to use?

[Tim van Dijen]

Hello Rick,

You need to add 'memberof' to your ldap-authsource attributes array.

https://github.com/simplesamlphp/simplesamlphp/blob/master/modules/ldap/docs/ldap.md

- Tim

Op dinsdag 25 juli 2017 05:22:37 UTC+2 schreef Rick Warren:

[Rick Warren]

That worked!  thanks so much!