CAS attributes in lowercase, missing scope
Joe Alfonso
jalfonso at colgate.edu
Tue Sep 27 15:12:46 EDT 2016
>> I have managed to get the IdP to release attributes in response to a CAS
>> ticket validation, but it appears that the attribute names are all converted
>> to lowercase (eg "edupersonprincipalname"), and do not contain any scoping.
>
>I'm guessing, but in attribute-resolver.xml I assume you want something like :
>
> <AttributeDefinition id="eduPersonPrincipalName" xsi:type="Scoped" scope="%{idp.scope}" ...
>
> Tom
That's pretty much the declaration I have:
<resolver:AttributeDefinition id="eduPersonPrincipalName"
xsi:type="ad:Scoped" scope="%{idp.scope}"
sourceAttributeID="sAMAccountName">[...]
I'm getting the attributes in the CAS validation response. I just
don't understand why the attribute names are all translated to
lowercase? Specifically, the CAS response contains
"<cas:edupersonprincipalname>jalfonso</cas:edupersonprincipalname>"
I understand that "scope" is a SAML concept, so it doesn't exactly
surprise me that it doesn't resolve for CAS services -- but it would
be nice if it could.
Thanks again,
Joe
More information about the users
mailing list