CAS protocol attribute release

Kevin Foote kpfoote at uoregon.edu
Mon Feb 22 18:55:21 EST 2016



> On Feb 22, 2016, at 3:41 PM, Walter Forbes Hoehn (wassa) <wassa at memphis.edu> wrote:
> 
> You use the standard attribute filter (attribute-filter.xml). The only tricky bit is that the “attribute requester” can vary depending on the configuration of the CAS client. In that case, you’ll need to do something like this:
> 
> <afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterRegex" regex="^https://foo.test.edu/.*$" />

Doesn’t it obey this as well?  I don’t have any CAS clients that need / use attributes (yet or hopefully ever).. 
So this is just me thinking.. not tested :) 

<afp:PolicyRequirementRule xsi:type="saml:AttributeRequesterInEntityGroup" groupID="uolocal-cas-services" />

Assuming a local CAS ServiceDefinition bean with the following.  
p:group=“uolocal-cas-services"

--------
thanks
 kevin.foote



More information about the users mailing list