cas username

Cantor, Scott cantor.2 at osu.edu
Tue Sep 22 13:39:51 EDT 2015


On 9/22/15, 1:34 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote:

>> On 9/22/15, 1:02 PM, "users on behalf of Abromowitz, Samuel" <users-bounces at shibboleth.net on behalf of s.abromowitz at neu.edu> wrote:
>> 
>> >Is there a way with IDP V3 to specify the cas username that is sent per service? The default is the uid.
>> 
>> The default is the canonicalized name coming out of the login process. A persual of the javadoc says that you can override that on a per-relying party basis to use an attribute coming out of the resolver instead using the userAttribute property on the ValidationConfiguration profile bean.
>> 
>> So that together would give you all of these options:
>> 
>> - conditionally produce the username coming out of authentication via the c14n step
>> - override the userAttribute property in specific cases
>> - conditionally produce a single attribute in the resolver with per-RP values and use a fixed attribute name in the userAttribute property in the DefaultRelyingParty profile bean
>> 
>
>JIRA issue IDP-772 appears to indicate that functionality is
>to be delivered in version 3.2.0:
>
>https://issues.shibboleth.net/jira/browse/IDP-772
>
>Am I reading that correctly?

My mistake, yes. So that leaves the first option for now.

-- Scott



More information about the users mailing list