CAS attributes in lowercase, missing scope
Joe Alfonso
jalfonso at colgate.edu
Wed Sep 28 09:35:44 EDT 2016
> I have managed to get the IdP to release attributes in response to a CAS
> ticket validation, but it appears that the attribute names are all
> converted to lowercase (eg "edupersonprincipalname"), and do not contain
> any scoping.
I figured this out, and Shib is not the problem. Sorry for any inconvenience.
For those playing at home, my mistakes were twofold:
1. I used a CAS client that silently converts CAS attribute names
to lowercase (https://github.com/kcbanner/node-cas/blob/fcd27dad333223b3b75a048bce27973fb3ca0f62/lib/cas.js#L1026).
2. I used Chrome's page inspector to view the CAS ticket validation
response, but I didn't pay attention to the fact that it converts all
element names to lowercase. I should've inspected the raw response
data instead.
One question does remain, however -- should scoped attributes retain
their scope when released via CAS?
Thanks for your time,
Joe
More information about the users
mailing list