Enable additional attributes
In default setting, only eduPerson attributes are enabled. So you should enable cn
(common name), sn
(surname), mail
(email address).
(snip)
<!-- Examples of LDAP-based attributes, uncomment to use these... -->
<!--
← Add comment end-->
<Attribute name="urn:mace:dir:attribute-def:cn" id="cn"/>
<Attribute name="urn:mace:dir:attribute-def:sn" id="sn"/>
← Add comment start <!--
<Attribute name="urn:mace:dir:attribute-def:givenName" id="givenName"/> <Attribute name="urn:mace:dir:attribute-def:displayName" id="displayName"/>
← Add comment end -->
<Attribute name="urn:mace:dir:attribute-def:mail" id="mail"/>
← Add comment start <!--
<Attribute name="urn:mace:dir:attribute-def:telephoneNumber" id="telephoneNumber"/>
(snip)
<Attribute name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" id="physicalDeliveryOfficeName"/>
-->
← Add comment end
<Attribute name="urn:oid:2.5.4.3" id="cn"/> <Attribute name="urn:oid:2.5.4.4" id="sn"/>
← Add comment start <!--
<Attribute name="urn:oid:2.5.4.42" id="givenName"/> <Attribute name="urn:oid:2.16.840.1.113730.3.1.241" id="displayName"/>
← Add comment end -->
<Attribute name="urn:oid:0.9.2342.19200300.100.1.3" id="mail"/>
← Add comment start <!--
<Attribute name="urn:oid:2.5.4.20" id="telephoneNumber"/>
(snip)
Note: other eduPerson* attributes (eduPersonAffiliation, eduPersonEntitlement, eduPersonPrincipalName, eduPersonScopedAffiliation, eduPersonTargetedID) are already enabled by default.