> I'm thinking we're going to have users select their "primary" account and flag that account in ldap so the credentials resolver would use something like this... > (&(acctStatus=primary)(uid=123456789))
Think this is your best bet. Getting the value provided on the login handler down into the CtoP resolver would require custom code. Probably the easiest strategy would be a component in the web flow that stores the username in a thread local. That's how we usually pass things around API layers in CAS. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
