CAS

[Kevin Foote]

> On May 12, 2016, at 9:30 AM, Rhian Resnick <rresnick at fau.edu> wrote:
> 
> How do you control attribute release?

Everybody gets uid / netid just as normal CAS. 

Luckily or unluckily what ever way you decide to look at it, the local decision (before me) was to steer people to 
use the Shib service if they wanted attributes. So I had no attribute deliver to deal with during the local move. 

The CAS service follows the attribute-filter rules just the same as all the other RPs that your IdP is dealing with. 
You can group or not group your CAS RPs within your cas service registry (acs-protocol.xml) and then filter on 
those groups or you can just use single entries. 


--------
thanks
 kevin.foote