Providing attributes from CAS

[Mosior, Benjamin]

Eric,

Take a look at the CAS documentation on the topic: https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration

The LoginHandler stanza that is added to the IdP's handler.xml facilitates the transfer of the CAS username to the Shibboleth IdP via the RemoteUser authentication method. The IdP then has the CAS-returned username. Yay.

Next, the IdP needs to use that username to look up attributes. This is where the ResolverRDBMSDataConnector you mention below comes into play. You'll essentially have to form an SQL query such as: SELECT * FROM PEOPLE WHERE userid='$requestContext.principalName' (an example from the page you linked below). That $requestContext.principalName is the username CAS passed to Shibboleth.

The next step from there would be to define which attributes to resolve and how/when to release them. You'll want to follow the basic flow of this page: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute

Benjamin Mosior

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Stein, Eric
Sent: Tuesday, April 09, 2013 8:16 AM
To: Shib Users
Subject: RE: Providing attributes from CAS

I did find https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverRDBMSDataConnector, which looks like what I should be using for all the other attributes. I'm still really not clear on how to get access to the username. How do I take it from the authentication step?

Thanks,
Eric