CAS attributes in lowercase, missing scope

Joe Alfonso jalfonso at colgate.edu
Wed Sep 28 09:35:44 EDT 2016


> I have managed to get the IdP to release attributes in response to a CAS
> ticket validation, but it appears that the attribute names are all
> converted to lowercase (eg "edupersonprincipalname"), and do not contain
> any scoping.


I figured this out, and Shib is not the problem.  Sorry for any inconvenience.

For those playing at home, my mistakes were twofold:

  1.  I used a CAS client that silently converts CAS attribute names
to lowercase (https://github.com/kcbanner/node-cas/blob/fcd27dad333223b3b75a048bce27973fb3ca0f62/lib/cas.js#L1026).

  2.  I used Chrome's page inspector to view the CAS ticket validation
response, but I didn't pay attention to the fact that it converts all
element names to lowercase.  I should've inspected the raw response
data instead.

One question does remain, however -- should scoped attributes retain
their scope when released via CAS?

Thanks for your time,
Joe


More information about the users mailing list