Help setting up Shib's 3.4.3 Built-in CAS Server for Banner Apps

[IAM David Bantz]

Perhaps I missed some of this thread, but I don't see documentation of the
full sequence including

1. building an appropriate SAML attribute (UDC_IDENTIFIER or
employeeNumber) from the LDAP attribute employeeNumber (in
attribute-resolver.xml)

2. Do you need to have UDC_IDENTIFIER appear as the CAS username? see
https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfiguration


3. CAS requires server-side StorageService in your IdP

David Bantz


On Thu, Feb 14, 2019 at 10:09 AM Melvin Lasky <melvin.lasky at manhattan.edu>
wrote:

> Hey guys,
> Thanks for all the responses!
>
> I put the LDAP Debug in, and I do see my employeeNumber in my logs.
>
> I changed my App to look for employeeNumber instead of UDC_IDENTIFIER to
> make it slightly easier. I also changed my attribute-filter.xml to look for
> one thing.
>
> Still no dice.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/14a7ac92/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: email_logo.jpg
Type: image/jpeg
Size: 7478 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20190214/14a7ac92/attachment.jpg>