LDAP Query in Policy

[geoffc]

Ah the joys of tokens.

Use the set operational property token to set it.

Then use the set local variable and the Operation Property noun to get
it back out later.

No need for any of this work, it is all built in!

I still discover new tokens, even today!

michael ballanco wrote:
> Thank you both for your help, I'm almost there! My endpoint actually
> stores the user's DN so I am now having the endpoint send the User DN
> upon a successful creation. That allows me to insert the User DN into
> the <status> message as <operation-data> in one of two ways. Below are
> my two options:
>
> <status event-id="hhs-idm#20080530211157#1#3" level="success"
> type="add">
> <operation-data>
> <userDN>\IDVAULT\Container\Users13\User1</userDN>
> </operation-data>
> </status>
>
> or
>
> <status event-id="hhs-idm#20080530213033#1#3" level="success"
> type="add">
> <operation-data userDN="\IDVAULT\Container\Users13\User1"/>
> </status>
>
> Which way makes more sense and then how do I pull the DN and put it
> into a query? Is it something like this:
>
> <token-query datastore="dest" scope="entry">
> <arg-dn>
> <token-xpath expression="@userDN"/>
> </arg-dn>
> <arg-string>
> <token-text xml:space="preserve">Internet EMail
> Address</token-text>
> </arg-string>
> </token-query>
>
>