...
- new install: $IDP_INSTALL_DIR/src/installer/resources/conf-tmpl/attribute-resolver.xm
- maintaining the configuration: $IDP_DIR/conf/attribute-resolver.xml
The "principal name" provided by Kerberos has the format "Principal@DOMAIN.COM".
You need to verify if your attribute-resolver configuration will accept this formatis compatible with the kerberos principal format (principal@REALM.COM).
Example_1: To extract the "principal name" from kerberos principal:
...