[CXF-4994] Support LDAP groups as claim

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.4, 2.6.7
• Fix Version/s: 2.7.5, 3.0.0-milestone1
• Component/s: STS
• Estimated Complexity: Unknown
• Assignee: Oliver Wulff
• Reporter: Oliver Wulff
• Created: 30/Apr/13 22:04
• Updated: 14/Aug/13 15:50
• Resolved: 03/May/13 22:11

Description

LdapClaimsHandler only supports attributes for the person entry. If the person entry doesn't provide an attribute for the list of groups, LDAP groups can be provided as claims.
Usually, the LDAP group entries contain an attribute (member or uniqueMember) which lists the DN of users belonging to this group.