Kevin Foote kpfoote at
Thu May 12 12:48:13 EDT 2016

> On May 12, 2016, at 9:30 AM, Rhian Resnick <rresnick at> wrote:
> How do you control attribute release?

Everybody gets uid / netid just as normal CAS. 

Luckily or unluckily what ever way you decide to look at it, the local decision (before me) was to steer people to 
use the Shib service if they wanted attributes. So I had no attribute deliver to deal with during the local move. 

The CAS service follows the attribute-filter rules just the same as all the other RPs that your IdP is dealing with. 
You can group or not group your CAS RPs within your cas service registry (acs-protocol.xml) and then filter on 
those groups or you can just use single entries. 


More information about the users mailing list