Sometimes our best laid plans get led astray by pre-existing infrastructure.

In the case of LDAP or Active Directory(AD), attributes can either be single valued or multi-valued. If PingFederate, a custom application, or a federation partner expects a single value and is instead confronted with multiple ones, what is it supposed to do? Sometimes this situation is handled automatically; other times a programmatic solution is required.

For more details, check out this article in the Ping Support Knowledge base: Does SaaS provisioning support the use of LDAP multi-valued attributes?

In addition, a Technical Round Table on the topic is coming up soon: Working with OGNL and Multi-valued Attributes: Tuesday, Feb. 26, 2013 at 12:00 p.m. (GMT-05:00).