Thanks, I tried that and it works pretty good.
I have another question and therefore am hijacking this thread, I hope this is ok: I configured ldap as identity provider (MS AD) and it works, but not how I want 😉
I do not understand what “username field” is for, because the matching attribute between ldap and mailbox is “attribute field”. I have read the documentation, but did not understand. That is just a question, not a problem, but here it comes:
On my old mailserver the mailboxes were configured as firstname without domain. On transferring the mailboxes from the old server to the new one, they are named now firstname@domain.tld, so this is what I have to match now in my active directory. What I did to achieve it, was adding the complete mailadress “firstname@domain.tld” to the ad users mail attribute and putting “mail” into “attribute field” in tne identity provider config. This works, but now I have to login with firstname@domain.tld and no longer only firstname (also the AD accountname, and what I want to match). Is it possible to add an suffix somewhere to the LDAP config, so “@domain.tld” would be concatenated to the given firstname within the identity provider? That would be better, but would help me only on login, but I would always have to put the right login into the mail attribute in my active directory, when a user is added there. Would it be better to change the mailbox names to just firstname and drop the domain and then configure the ldap provider to match to the ad account name?