CAS attributes in lowercase, missing scope

Joe Alfonso jalfonso at colgate.edu
Tue Sep 27 15:12:46 EDT 2016


>> I have managed to get the IdP to release attributes in response to a CAS
>> ticket validation, but it appears that the attribute names are all converted
>> to lowercase (eg "edupersonprincipalname"), and do not contain any scoping.
>
>I'm guessing, but in attribute-resolver.xml I assume you want something like :
>
> <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}" ...
>
> Tom

That's pretty much the declaration I have:
   <resolver:AttributeDefinition id="eduPersonPrincipalName"
xsi:type="ad:Scoped" scope="%{idp.scope}"
sourceAttributeID="sAMAccountName">[...]

I'm getting the attributes in the CAS validation response.  I just
don't understand why the attribute names are all translated to
lowercase?  Specifically, the CAS response contains
"<cas:edupersonprincipalname>jalfonso</cas:edupersonprincipalname>"

I understand that "scope" is a SAML concept, so it doesn't exactly
surprise me that it doesn't resolve for CAS services -- but it would
be nice if it could.

Thanks again,
Joe


More information about the users mailing list