LDAPCP with SP16 about ldapcp

[Yvand]

Hello, an easy way to troubleshoot this is to replay the LDAP query using PowerShell, so you can investigate why LDAP server returns nothing.
You can check page Troubleshoot-LDAPCP to find how to do this

[alpachi]

Here is some additional info from troubleshooting, still no progress:
[LDAPCP] Got 0 result(s) in 2ms from "LDAP://domain.com/DC=domain,DC=com" with query "(| (&(objectclass=user)(userPrincipalName=[email protected])) )"

My thought is, is there a way I can map the incoming claim for userPrincipalName to Email?
The authentication for SP16 only works when using UPN from the Trusted Claims Provider, but if i can tell LDAPCP to map to email, that may help me to resolve.

Any suggestions? much appreciated.

[Yvand]

Hi @alpachi, can you clarify what you mean exactly by mapping "the incoming claim for userPrincipalName to Email"?
Is it SharePoint or LDAPCP that should do some mapping?
In LDAPCP, you have the claims mapping page in central admin > security that lets you configure as you need the mapping between LDAP attribute and claim types. Isn't it what you are looking for?

[alpachi]

I was able to map out the configuration and narrow this down. Initially i thought to map the incoming claim from upn to mail, but thats incorrect. The way someone configured the Provider as it sends claims to SharePoint was incorrect. Once this was corrected, I reconfigured SharePoint to match the claim identifier and Namespaces, then things worked just fine. Thank you!