Using CAS Attributes

[Sacilowski, Tadeusz]

Hello,

I'm currently implementing Shibboleth at our institution using the Unicon
Shib-CAS authentication plugin (https://github.com/Unicon/shib-cas-authn2)
to defer authentication to our existing CAS deployment. Currently, our CAS
also retrieves attributes from LDAP.

I was wondering how to get the attributes that have already been retrieved
by CAS over to Shib for release? I know I can just set up an LDAP data
connector with the appropriate attribute definitions on the Shib side, but
then we have 2 LDAP lookups for the same principal... one on the CAS side
and one on the Shib side. I'm sure there's not too much of a performance
hit using this method, but out of curiosity, I'd like to see if there's a
way to avoid this.

Some previous searches let me to the general idea of storing
assertion.getAttributes() in the LoginHandler.SUBJECT_KEY in the
AuthenticatedNameTranslator class. I also need to create a Data Connector
to pull these attributes back out, but this is where I'm getting lost.

Any suggestions? Am I on the right track here? I'm still very new to
Shibboleth so pardon any ignorance.

Thank you!

-- 
*Tadeusz Sacilowski*
*Manager, Portal & Mobile Development*
Teachers College, Columbia University
sacilowski at tc.columbia.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140815/fbdb8505/attachment.html