Change username in CAS response?

[Lucia Siochi]

Hello,

Is it possible (or readily do-able) to modify the username returned in the CAS response? We need the usernames to be returned in whichever case (upper/lower) they had originally, instead of always in lower-case. We want to make this change only for CAS.  We were thinking of editing the response before it is sent out by replacing the lower-cased username with the value of another attribute that contains the originally-cased username.

Some context:
We are implementing IdPv3's built-in CAS with the intention of replacing our current jasig-cas service. For the most part it seems to be working, except for certain clients. Our current jasig cas instance returns the username in whichever case the username was in from the data source. Between our two AD domains, one domain has the usernames in lower-case, and the other domain in upper-case. As a result, some of our CAS clients created accounts with some usernames in uppercase and some usernames in lower-case. Since shib returns the usernames in lower-case, regardless of the case the username originally was in, some of our CAS clients don't authenticate some valid accounts (the ones in upper-case).

I did locate shib's CAS velocity templates, but they are in /opt/shibboleth-idp/system/views/cas, which as I understand it, should not be customized!

I saw there is a username reference in validateSuccess.vm, which comes from a variable:
<cas:user>$escapeUtils.escapeXml($ticketValidationResponse.userName)</cas:user>
Can I change the value of $ticketValidationResponse.userName just before the response is generated? If so, how? Is this a bad idea or will it cause problems?

Or is there a better way to get the originally-cased username value in the CAS Response?

Any help is appreciated!

Thanks!
Lucia

------------------
Lucia Siochi
Senior Systems Architect, IT Services
Central Piedmont Community College
Central Campus, Citizens Bldg
PO Box 35009 Charlotte, NC  28235
704.330.6521
www.cpcc.edu<http://www.cpcc.edu/>
[cid:image001.png at 01CCCA1C.75B56920]
We value your feedback. How is our service<http://surveys.cpcc.edu/47408/47408.asp> at CPCC?


________________________________

This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and proprietary information. If you are not the intended recipient, you are hereby notified that any retention, dissemination, reproduction, or use of the information contained in this e-mail is strictly prohibited. If you have received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160629/3f610de3/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 2555 bytes
Desc: image002.jpg
URL: <http://shibboleth.net/pipermail/users/attachments/20160629/3f610de3/attachment-0001.jpg>