cas username

Scott Koranda skoranda at gmail.com
Tue Sep 22 13:34:56 EDT 2015


> On 9/22/15, 1:02 PM, "users on behalf of Abromowitz, Samuel" <users-bounces at shibboleth.net on behalf of s.abromowitz at neu.edu> wrote:
> 
> >Is there a way with IDP V3 to specify the cas username that is sent per service? The default is the uid.
> 
> The default is the canonicalized name coming out of the login process. A persual of the javadoc says that you can override that on a per-relying party basis to use an attribute coming out of the resolver instead using the userAttribute property on the ValidationConfiguration profile bean.
> 
> So that together would give you all of these options:
> 
> - conditionally produce the username coming out of authentication via the c14n step
> - override the userAttribute property in specific cases
> - conditionally produce a single attribute in the resolver with per-RP values and use a fixed attribute name in the userAttribute property in the DefaultRelyingParty profile bean
> 

JIRA issue IDP-772 appears to indicate that functionality is
to be delivered in version 3.2.0:

https://issues.shibboleth.net/jira/browse/IDP-772

Am I reading that correctly?

Scott K


More information about the users mailing list