cas username

Tom Zeller tzeller at dragonacea.biz
Tue Sep 22 13:37:19 EDT 2015


> On Sep 22, 2015, at 12:34 PM, Scott Koranda <skoranda at gmail.com> wrote:
> 
>> On 9/22/15, 1:02 PM, "users on behalf of Abromowitz, Samuel" <users-bounces at shibboleth.net on behalf of s.abromowitz at neu.edu> wrote:
>> 
>>> Is there a way with IDP V3 to specify the cas username that is sent per service? The default is the uid.
>> 
>> The default is the canonicalized name coming out of the login process. A persual of the javadoc says that you can override that on a per-relying party basis to use an attribute coming out of the resolver instead using the userAttribute property on the ValidationConfiguration profile bean.
>> 
>> So that together would give you all of these options:
>> 
>> - conditionally produce the username coming out of authentication via the c14n step
>> - override the userAttribute property in specific cases
>> - conditionally produce a single attribute in the resolver with per-RP values and use a fixed attribute name in the userAttribute property in the DefaultRelyingParty profile bean
>> 
> 
> JIRA issue IDP-772 appears to indicate that functionality is
> to be delivered in version 3.2.0:
> 
> https://issues.shibboleth.net/jira/browse/IDP-772
> 
> Am I reading that correctly?

I believe so, yes.


More information about the users mailing list